r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 73c4166ca864f777db2cc1cd8658a7c2
c56b66b0b7c8516d4d5bfafe0c166711c78f3d25
310c633350812c064e159275b6dbbdba6d6a5991a54ccfcc23459320c6513572
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "310C633350812C064E159275B6DBBDBA6D6A5991A54CCFCC23459320C6513572"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11229
Expires: Sat, 22 Oct 2022 20:42:49 GMT
Date: Sat, 22 Oct 2022 17:35:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ae56efd62a0d9249d98573172eb8b28b
5ff4e9959be677ad76c26ca73f9ef4feb9fa2f28
82d9ee4948fce839f7edb1f8490c4213cded3912464a4169b0bf6a61278694bd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82D9EE4948FCE839F7EDB1F8490C4213CDED3912464A4169B0BF6A61278694BD"
Last-Modified: Sat, 22 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11245
Expires: Sat, 22 Oct 2022 20:43:06 GMT
Date: Sat, 22 Oct 2022 17:35:41 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash c9df6b36bf16969ac566c1b798362e4a
e56eff34815153ae019a4bf63eb9746dd9ae2e5b
33c1175144ab2be42c9de383f7893a6e60cd1f21f282eacb413d546331db3fa0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Retry-After, Alert, Content-Type, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 22 Oct 2022 17:26:25 GMT
Expires: Sat, 22 Oct 2022 17:26:58 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 3f56d86af987a5808c3846bdd32ffcf2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P8
X-Amz-Cf-Id: -2Qkk8TC8Yzjmwgxt6-LPU1JVJOggXDDG0c9sAM5BvQ79_QA6G7W2w==
Age: 556
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 8043f9b060f563a44071586f0e19c7d4
4925f4fa0bd5601896c8f3cd92f2ee999fe83253
3d6705ce9d72763a0f118b4f63ad82d91f44433f2f9ebae8fbd1f7cc06ee2e2d
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 22 Oct 2022 17:35:41 GMT
Content-Type: application/ocsp-response
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 22 Oct 2022 00:45:18 GMT
Expires: Sun, 23 Oct 2022 00:45:18 GMT
ETag: "4925f4fa0bd5601896c8f3cd92f2ee999fe83253"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: o/k6acRuJiN5hxL2sd1BsPrpJ0vwFRI8SDeSRhaMTGRfCRlByBzCjBkoujoKNxe3aR9aLUuMfxg=
x-amz-request-id: NB19TD04HMCQRNZA
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 22 Oct 2022 17:07:43 GMT
age: 1678
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:41 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, ETag, Retry-After, Cache-Control, Alert, Expires, Pragma, Content-Type, Backoff, Last-Modified
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sat, 22 Oct 2022 17:03:50 GMT
Expires: Sat, 22 Oct 2022 17:23:49 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f0d6cf9facc31102542a16775df72d9e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P8
X-Amz-Cf-Id: srvMvhm6d3Nl_-HVOISbv9nene4-_f7CK6US4NbQDWp0gghvrGWW1g==
Age: 1911
ocsp.digicert.com/
200 OK 471 B IP
Hash fecd12689ba4c6aa556814b7fac0d344
a3005f6333ce5201a73e2857c764a1b0091a91d5
83e0fb564f86df4300e8fc4b5baaf0ed13102c384922d388e02620fb3363a842
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3582
Cache-Control: max-age=142246
Content-Type: application/ocsp-response
Date: Sat, 22 Oct 2022 17:35:41 GMT
Etag: "6353a495-1d7"
Expires: Mon, 24 Oct 2022 09:06:27 GMT
Last-Modified: Sat, 22 Oct 2022 08:06:45 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
metricbolt.com/esie/ularaoqldmoi
301 Moved Permanently 0 B URL HTTP/2 metricbolt.com/esie/ularaoqldmoi
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /esie/ularaoqldmoi HTTP/1.1
Host: metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 22 Oct 2022 17:35:42 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://www.metricbolt.com/esie/ularaoqldmoi
x-sucuri-id: 19015
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-xss-protection: 1; mode=block, 1; mode=block
x-content-type-options: nosniff, nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, sameorigin
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
set-cookie: apbct_timestamp=1666460141; path=/; secure; SameSite=Lax
apbct_site_landing_ts=1666460141; path=/; secure; HttpOnly; SameSite=Lax
apbct_page_hits=1; path=/; secure; HttpOnly; SameSite=Lax
apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%25223ae438954f12e120ea242b47f6b3ff9d%2522%257D; path=/; secure; HttpOnly; SameSite=Lax
apbct_urls=%7B%22metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460141%5D%7D; expires=Tue, 25-Oct-2022 17:35:41 GMT; Max-Age=259200; path=/; domain=www.metricbolt.com; secure; HttpOnly; SameSite=Lax
apbct_site_referer=UNKNOWN; expires=Tue, 25-Oct-2022 17:35:41 GMT; Max-Age=259200; path=/; domain=www.metricbolt.com; secure; HttpOnly; SameSite=Lax
ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0; expires=Mon, 21-Nov-2022 17:35:41 GMT; Max-Age=2592000; path=/; secure; SameSite=Lax
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
vary: User-Agent,Accept-Encoding
x-sucuri-cache: MISS
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: bnkPlbT6i/jsC4btnpmmQA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DXtuFozXY5pf+ucoRLtf6hGYrlc=
www.metricbolt.com/wp-content/themes/hello-elementor/theme.min.css?ver=2.6.1
200 OK 3.7 kB URL HTTP/2 www.metricbolt.com/wp-content/themes/hello-elementor/theme.min.css?ver=2.6.1
IP
File type ASCII text, with very long lines (15672), with no line terminators
Hash 607799bfa5d48117a95cd9dda8a17c2b
9a969f06c70600b753b160db19a5d37c9d249d10
78f67e192604e0dca624c2dcc8ea7cd6c54e14fe15918e7c9586ec1a22775876
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/hello-elementor/theme.min.css?ver=2.6.1 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 3725
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Wed, 03 Aug 2022 03:39:47 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/jet-menu/integration/themes/hello-elementor/assets/css/style.css?ver=2.2.3
200 OK 116 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/jet-menu/integration/themes/hello-elementor/assets/css/style.css?ver=2.2.3
IP
Hash e6eaae649aa2b178e75fa93f11841198
f84f96f358a89b649f7c53236424947ef34460d4
c4f0498de920436d562d12c56f73e790287960e5b9a7af62bb3ac56c6a6479a8
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/jet-menu/integration/themes/hello-elementor/assets/css/style.css?ver=2.2.3 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 116
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 15 Aug 2022 22:54:05 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 17 kB URL HTTP/2 www.metricbolt.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
File type ASCII text, with very long lines (43771)
Hash 2a67a4888baa44de739f3fe56203ce07
da175eae57f26b655747d79f055477e3fee1abb9
3a4d7627476a0099ca4bcc101685f27de04cb49dd66ef842d72c6cda270599dd
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 16594
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 04 Jul 2022 22:40:38 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/cleantalk-spam-protect/css/cleantalk-public.min.css?ver=5.187
200 OK 335 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/cleantalk-spam-protect/css/cleantalk-public.min.css?ver=5.187
IP
File type ASCII text, with very long lines (591), with no line terminators
Hash 17aa5d3c0558879a93af1aa2fc964bbe
c3f17a02f000847914be8e5b5b6dbb2e2c7a902f
868c3a5984362a329ef60998295427c32710a7d11c4f2d8d1cdffbd5196a4b41
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/cleantalk-spam-protect/css/cleantalk-public.min.css?ver=5.187 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 335
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 20 Oct 2022 11:09:16 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/themes/hello-elementor/style.min.css?ver=2.6.1
200 OK 2.3 kB URL HTTP/2 www.metricbolt.com/wp-content/themes/hello-elementor/style.min.css?ver=2.6.1
IP
File type ASCII text, with very long lines (6051), with no line terminators
Hash c0a774e614f840a7f380a9aa68f16ac3
d42d9e9c586feba86b3accaf869ca2a365469b54
294b8486de91d8403977d27d636c158fe64ed0c93ce11902ed2f2b10f31d113f
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/hello-elementor/style.min.css?ver=2.6.1 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 2332
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Wed, 03 Aug 2022 03:39:47 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/uploads/elementor/css/post-2746.css?ver=1665886947
200 OK 1.1 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/elementor/css/post-2746.css?ver=1665886947
IP
File type ASCII text, with very long lines (5125), with no line terminators
Hash 674c74cf67eef9ff07e821109e93fc7c
438c5503383d75c6a7312dcee11f2beeef0ad78e
274b3b62f54851388be971150422dd69dd7b5375576e9c807d4cfd33d2600908
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-2746.css?ver=1665886947 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 1055
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Sun, 16 Oct 2022 02:22:27 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/jet-menu/assets/public/lib/font-awesome/css/all.min.css?ver=5.12.0
200 OK 12 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/jet-menu/assets/public/lib/font-awesome/css/all.min.css?ver=5.12.0
IP
File type ASCII text, with very long lines (56994)
Hash 679996d5299138b293afbc795394dce1
0013e232c7148dada891b8e4c2f3b0e157ac8ef0
29200ae412911cd51e033d79d4cd22c3cebf0a8cab0bc3460ed5b444fc41e8cd
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/jet-menu/assets/public/lib/font-awesome/css/all.min.css?ver=5.12.0 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 12372
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 15 Aug 2022 22:54:05 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/jet-menu/assets/public/lib/font-awesome/css/v4-shims.min.css?ver=5.12.0
200 OK 4.4 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/jet-menu/assets/public/lib/font-awesome/css/v4-shims.min.css?ver=5.12.0
IP
File type ASCII text, with very long lines (26516)
Hash a1f6dbc278f1e8065888665c6f5401fa
a4773b7404f51ff32c42f5690e0d7d3c5b17081f
54c0e3379aa4f5aa469fbc17e0e3bab1df35cfe73ff6fdd901429ccecd18c863
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/jet-menu/assets/public/lib/font-awesome/css/v4-shims.min.css?ver=5.12.0 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 4436
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 15 Aug 2022 22:54:05 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/jet-menu/assets/public/css/public.css?ver=2.2.3
200 OK 12 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/jet-menu/assets/public/css/public.css?ver=2.2.3
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 83f12522656ee821205cb493bd94159e
7712684e9d714aafcd616eb9cdd8a1d17948116b
c960a1694f635b70880b5fa0953938e368b0c741a7c9382df56b2fa5cd64ca05
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/jet-menu/assets/public/css/public.css?ver=2.2.3 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 12435
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 15 Aug 2022 22:54:05 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/uploads/jet-menu/jet-menu-general.css?ver=1661216169
200 OK 175 B URL HTTP/2 www.metricbolt.com/wp-content/uploads/jet-menu/jet-menu-general.css?ver=1661216169
IP
File type ASCII text, with very long lines (355), with no line terminators
Hash 144293d6ab6333ebe59b6efb3a1b2539
69d4ef865f724cfe9e7a1f0b7fba99d466887d02
6aea967edc7f7ddd9733f35b27069772dbedfc590bfb9e3d1ef837e6016cd151
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/uploads/jet-menu/jet-menu-general.css?ver=1661216169 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 175
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Tue, 23 Aug 2022 00:56:09 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/jet-elements/assets/css/jet-elements-skin.css?ver=2.6.7
200 OK 3.9 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/jet-elements/assets/css/jet-elements-skin.css?ver=2.6.7
IP
File type ASCII text, with very long lines (17809)
Hash 4af36aea4eca1502eeca656cbd355239
188572e01ed4406527cd912cf1dcb8e790da10d0
9e5036011df7c285f3d1ef4f51924d820596e0ecedbadfe96a8331b7be14fabf
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/jet-elements/assets/css/jet-elements-skin.css?ver=2.6.7 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 3942
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 15 Aug 2022 22:53:57 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
200 OK 4.0 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
IP
File type ASCII text, with very long lines (19233)
Hash 2701214b028ad24fa347df8335b36d12
156bc8a7ad2657f00881890637f07c6052636499
9a6e62615ceeec7a9763e4f9614e4715d04fd87873b23db2b3ead06c996cad27
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 4008
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 01 Aug 2022 05:11:38 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.7.7
200 OK 1.9 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.7.7
IP
File type ASCII text, with very long lines (11487)
Hash 9538d7786a3e96598030c9da70f42a61
20970723e8d958016a8e78ed6f52721c1bd41b40
ee90c0e33ee7275e3349e97b3f74589de1618f969b7fff4094d883d9cd0935e5
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.7.7 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 1885
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Tue, 20 Sep 2022 20:03:00 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/jet-tabs/assets/css/jet-tabs-frontend.css?ver=2.1.19
200 OK 6.6 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/jet-tabs/assets/css/jet-tabs-frontend.css?ver=2.1.19
IP
File type ASCII text, with very long lines (34059)
Hash 25d54d831bacb0081555cb1f86b70c97
2f5588eff6013d58ebf01d1a23413587562b1480
bcbe2228c095a4eeb0b8db89f4ecdf6b71db2ea50091e40574b9f1b62a623836
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/jet-tabs/assets/css/jet-tabs-frontend.css?ver=2.1.19 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 6630
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 15 Aug 2022 22:54:11 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/uploads/elementor/css/global.css?ver=1665886948
200 OK 16 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/elementor/css/global.css?ver=1665886948
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9c0bb91adbba5db0a5eb29bdf670c4c1
60548294adbb5fbd5fa960dd5a575ab5871d3f42
4081af8bd2282c7acbe62995d6ae39a366c991f44d6b6ddbfc520d3cb81a33e3
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/elementor/css/global.css?ver=1665886948 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 15949
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Sun, 16 Oct 2022 02:22:28 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/uploads/elementor/css/post-427.css?ver=1665959444
200 OK 1.7 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/elementor/css/post-427.css?ver=1665959444
IP
File type ASCII text, with very long lines (7398), with no line terminators
Hash ea5e8c5c6d4d30f6509fb959eb939d9a
d2824c14f6e566c5cc654d8c002ff068ea5166ea
95757231031dca41eada9217922b2f43ba0ad07ef6e87f55a96b519ea2155da9
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-427.css?ver=1665959444 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 1687
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Sun, 16 Oct 2022 22:30:44 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/uploads/elementor/css/post-432.css?ver=1665886949
200 OK 2.9 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/elementor/css/post-432.css?ver=1665886949
IP
File type ASCII text, with very long lines (11787), with CRLF, LF line terminators
Hash cdcaabd47800665580b505bb23c3405e
7ac537f70d44046d37b05ef3927daaac2de8b60b
7a0812b9fec2e1e3ffc4704b59ba7f162e5efb199b97669eb8b3fcd8ca9b5265
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-432.css?ver=1665886949 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 2945
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Sun, 16 Oct 2022 02:22:29 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/uploads/elementor/css/post-2898.css?ver=1665889001
200 OK 1.7 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/elementor/css/post-2898.css?ver=1665889001
IP
File type ASCII text, with very long lines (8292), with no line terminators
Hash 0a90bed371c6f1c7b54ef9f9cba2b714
ef987a014404a76c55484f7d7c6f760fe036cc2f
230b9fa946e04bedb55f99a26db8c766068ca7fd613b6b655c26d2b1b0acfb17
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-2898.css?ver=1665889001 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 1697
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Sun, 16 Oct 2022 02:56:41 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
200 OK 13 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
IP
File type ASCII text, with very long lines (57726)
Hash dc63c0a8e2d5857cc7a00a4b5456dabb
ee29df5eb2a4bf3eb805b160551c1afd84b42599
035ef40b1dd3df1eefb2dd3c8c2096425727fb939b06f3aa0bc6ef91dafd5441
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 12577
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 17 Jun 2021 15:07:24 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
200 OK 309 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
IP
File type ASCII text, with very long lines (483)
Hash 0ea43e394ddaae5fdb710dbbc8869e58
3b0c93adc80720236096201db5cc2751e703996d
85225fffa21a94bfd954393d7471069ab227b98fd8b51cb5ab4af5488168a34e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 309
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 17 Jun 2021 15:07:24 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
200 OK 308 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
IP
File type ASCII text, with very long lines (491)
Hash 851fd514d412b7e854365f20a4227c8a
08bf47072f70af1816450cc85a5efb3b8f9114d2
a9449e3cc7c003e5ed6b93bae7b0bba3e4f1713c52214f41d3591692a759b9d7
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 308
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 17 Jun 2021 15:07:24 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/2 www.metricbolt.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 4618
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Wed, 18 Nov 2020 20:36:06 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/security-malware-firewall/js/spbc-cookie.min.js?ver=2.96
200 OK 655 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/security-malware-firewall/js/spbc-cookie.min.js?ver=2.96
IP
File type ASCII text, with very long lines (1150)
Hash 0174be60ff85aeda31638b9284f1081e
13f0d08ff8374fb652627c0d6af7a151717604cc
28cd9fec2d858aecda212966b8010f852147bd4a25a6fdbfb7b9c4e4fe87dd46
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/security-malware-firewall/js/spbc-cookie.min.js?ver=2.96 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 655
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 17 Oct 2022 10:40:16 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
200 OK 13 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261\012- data
Hash c4d3f698e2397e4b9395afddbac34990
19209fe78c3081556863a41e19be583dd94b8916
e935f223236d5704ef9374885e77a0637ddd50688411f5824723a7b1b3016d26
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: font/woff2
content-length: 13306
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 17 Jun 2021 15:07:24 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/esie/ularaoqldmoi
410 Gone 37 kB URL HTTP/2 www.metricbolt.com/esie/ularaoqldmoi
IP
Hash cf66a9183e123bcfd3405eb71291943a
249cc2c6d54ef8e298b51019884fc9172918551f
5edabbde89dc25e7f8a409ee8e6769743c51b87545b94e8fb4af8304ddeed50f
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /esie/ularaoqldmoi HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 410 Gone
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/html; charset=UTF-8
x-sucuri-id: 19015
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-xss-protection: 1; mode=block, 1; mode=block
x-content-type-options: nosniff, nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, sameorigin
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.metricbolt.com/wp-json/>; rel="https://api.w.org/"
set-cookie: apbct_timestamp=1666460142; path=/; secure; SameSite=Lax
apbct_site_landing_ts=1666460142; path=/; secure; HttpOnly; SameSite=Lax
apbct_page_hits=1; path=/; secure; HttpOnly; SameSite=Lax
apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; path=/; secure; HttpOnly; SameSite=Lax
apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; expires=Tue, 25-Oct-2022 17:35:42 GMT; Max-Age=259200; path=/; domain=www.metricbolt.com; secure; HttpOnly; SameSite=Lax
apbct_site_referer=UNKNOWN; expires=Tue, 25-Oct-2022 17:35:42 GMT; Max-Age=259200; path=/; domain=www.metricbolt.com; secure; HttpOnly; SameSite=Lax
ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0; expires=Mon, 21-Nov-2022 17:35:42 GMT; Max-Age=2592000; path=/; secure; SameSite=Lax
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: MISS
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css
200 OK 1.7 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css
IP
File type ASCII text, with very long lines (11736)
Hash 123f8b37abef34d50d796ace35e35f09
127f09c18b566bf5379bd37c7572301a5ed6f0ef
0c12c27eb88912b938c2b844a23b5157a7b3424b9e79cd91782aa7bf201389d1
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
content-length: 1651
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Sun, 02 Oct 2022 20:12:12 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/uploads/2021/12/2.png
200 OK 8.5 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/2021/12/2.png
IP
File type PNG image data, 280 x 280, 8-bit/color RGB, non-interlaced\012- data
Hash 8fd54d99119e03b5d090b8e0482c1843
ceb3aefbb5e584f3e8dd1f768fd60038c496ad81
899609702c4920d031d061f5939bdc50619caef28cfdc445d48c59787ba2b09c
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2021/12/2.png HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: image/png
content-length: 8530
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 20 Jan 2022 19:57:14 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ea20460028066b7fba2f10b51d883192
a73b8263a4477aceeda349c7beff7050de9df38b
f933a7ff2c6ec9189ba29fdf09da9125ac59d9c03b4a14e14e9f1b5fa5322b1c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 22 Oct 2022 17:35:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.metricbolt.com/wp-content/uploads/2021/12/3.png
200 OK 9.5 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/2021/12/3.png
IP
File type PNG image data, 280 x 280, 8-bit/color RGB, non-interlaced\012- data
Hash 70b67297486111e06bc3f99227200db1
768695290d615ed094c81a824b2d63b8bb011d01
9f76afcee35edffa69f4f25ed48980f19b1aacc7f34f800376fc4bbf043d1591
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2021/12/3.png HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: image/png
content-length: 9501
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 20 Jan 2022 19:57:15 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/uploads/2021/12/4.png
200 OK 10 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/2021/12/4.png
IP
File type PNG image data, 280 x 280, 8-bit/color RGB, non-interlaced\012- data
Hash 9722f201b3e310b6838fecd4489168a0
e95fe6c5a14052578b2b583f3dc02f1202781889
ce9709a6ebc4e7c1b044dc3fedd9bd2b9aa57a9a7b40b2f2f4ce9e1f8a1cd1ee
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2021/12/4.png HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: image/png
content-length: 10040
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 20 Jan 2022 19:57:15 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/uploads/2021/12/5.png
200 OK 12 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/2021/12/5.png
IP
File type PNG image data, 280 x 280, 8-bit/color RGB, non-interlaced\012- data
Hash 568e3eedd75c6353439904887be505d1
96aec098f7773e4b76adf4c376658d1b0dfc9008
a578c44274029fd89f8afeee39154ecbdea15339b9d5a4d6fb4c807c1ead1549
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2021/12/5.png HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: image/png
content-length: 12380
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 20 Jan 2022 19:57:15 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/uploads/2021/12/6.png
200 OK 7.5 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/2021/12/6.png
IP
File type PNG image data, 280 x 280, 8-bit/color RGB, non-interlaced\012- data
Hash 056d0c279199af14b0edc6a10b3eccd3
d6d8e4d34144e1d65b54a1371339266044670eee
d2e6c150839a163d2db93a47d6c38104da452d01004ea447afa871827648db43
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2021/12/6.png HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: image/png
content-length: 7522
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 20 Jan 2022 19:57:16 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/uploads/2021/12/7.png
200 OK 9.2 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/2021/12/7.png
IP
File type PNG image data, 280 x 280, 8-bit/color RGB, non-interlaced\012- data
Hash cb947f0c6aaef78d1e9e5e922dacb87e
0b574eca8ff924deafd0bab6058c42521dd61b87
f459a5a2508cca487d5ac689700c9e724caf2e54bdc8d6fc23af1024351eea5a
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2021/12/7.png HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: image/png
content-length: 9199
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 20 Jan 2022 19:57:16 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=1.0.0
200 OK 1.0 kB URL HTTP/2 www.metricbolt.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=1.0.0
IP
File type ASCII text, with very long lines (3164), with no line terminators
Hash b61faf78df8ff0e5446c7fe2b070b144
d98140a3225bbade0a77d7d6001e65148a7ec6b8
3bb0086b96f0d58dc01f13c3d0055c3fe41a4e79e2d1461641ada355763c77c2
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=1.0.0 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 1048
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Wed, 03 Aug 2022 03:39:47 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/jet-menu/assets/public/js/legacy/jet-menu-public-scripts.js?ver=2.2.3
200 OK 17 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/jet-menu/assets/public/js/legacy/jet-menu-public-scripts.js?ver=2.2.3
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (2070)
Hash bb8fd9e82e3d0b8229f8248209a05c23
37975624b2b5f041dc2f2c58136d2351aeea4ac3
34ad485479ada05680bca76b043713763f9e09015f875697f1c80d3a91e4a783
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/jet-menu/assets/public/js/legacy/jet-menu-public-scripts.js?ver=2.2.3 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 16755
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 15 Aug 2022 22:54:05 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.7
200 OK 2.5 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.7
IP
File type ASCII text, with very long lines (5141)
Hash 901b64a0a93933a33a1f72b269ded99d
f03d762d1307b8932ac92ad8de8eec2019d1ea19
88dba614e8a278a9dd9f43f660e7a18d6781f5b3e8785ddb2e4cf2c2e3f55868
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.7 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 2451
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Tue, 20 Sep 2022 20:03:00 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.8
200 OK 2.3 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.8
IP
File type ASCII text, with very long lines (4918)
Hash a8a064f7e05640436a939b0839c64a66
e9bbdd085a3038acd63d108accba8dfb5499f4c0
2173daddf76795f8194c34463bfc5c9be793aecc545b4672ed5a6f9afcb473c3
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.8 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 2313
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Sun, 02 Oct 2022 20:12:12 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.8
200 OK 13 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.8
IP
File type Unicode text, UTF-8 text, with very long lines (32889)
Hash a3a9966edbcf4ff24cbce6355e84c975
4c31a0c1e12987b364c178689b8283d09e4f8a63
d50d738abb2b285ac79c3552d286706f3a99e60add08edad08f20b2d4adbdb8d
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.8 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 13281
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Sun, 02 Oct 2022 20:12:12 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.7 kB URL HTTP/2 www.metricbolt.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
File type ASCII text, with very long lines (6475), with no line terminators
Hash 45bd1d6f7fc3a4069fc6fd400b90c961
903c7e28c7141e9fc1bdb4dfc62d043a97a01e2d
c638a0057b4be0a61cfb65b1860a855a327397e9871f5dde28fa2f138fb394dc
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 2675
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 11 Apr 2022 22:34:30 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 8.3 kB URL HTTP/2 www.metricbolt.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash e49f0561a452c9d04fb7d1510a23cc8c
9e8fc2e3129da4fe2790eee565a6478b864bea83
ab4f9f418b022ab34d617ee2f95d70afff005ed4d4d92e313ce84a56b40bce75
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 8254
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 11 Apr 2022 22:34:30 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
200 OK 1.7 kB URL HTTP/2 www.metricbolt.com/wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
IP
File type ASCII text, with very long lines (4875)
Hash 6a452794a68bc140a53b30519b94edf6
68046f5611ba3cf5da1c46087609aff18f59fdc1
259990a9e6191a72a51ac9d038d0c52bb56d880a2b0d460b1fca3f3fee7961ed
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 1712
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 11 Apr 2022 22:34:30 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.2
200 OK 1.5 kB URL HTTP/2 fonts.googleapis.com/css?family=Montserrat%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.2
IP
Hash 28819ccbe7f3f75b8507bfa079b3c516
a4b2d032b512981debe997a1e4572911a3b4c623
ec4fc167e4ea19f050abc95d1ed960cae58afbf810d72adc9a469e558aa4a2cc
GET /css?family=Montserrat%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 22 Oct 2022 17:35:43 GMT
date: Sat, 22 Oct 2022 17:35:43 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.metricbolt.com/wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94
200 OK 4.2 kB URL HTTP/2 www.metricbolt.com/wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94
IP
Hash a72df5f7a597c541e18a33abef3c11f5
9500913a0a3fca9979a0aed9cb745926d9f86f83
258da631753c1d8d88fb1316024b671fa4a9ac87c9d6c4f38a45bc2c3bf9f3fc
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 4234
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Wed, 13 Apr 2022 01:42:48 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.7
200 OK 7.6 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.7
IP
File type ASCII text, with very long lines (21374)
Hash 3901fa0403f30e6b3b9edd3bbba2d506
178b36d7db2b18ade3f36d6a1ec8a55a1bd4d832
f6c31ed46c7090d4c8d7d5b1770aa0a3fe351fdaf7601b902634a964b6e1adde
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.7 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 7577
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Tue, 20 Sep 2022 20:03:00 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
200 OK 3.7 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP
File type ASCII text, with very long lines (12198), with no line terminators
Hash e2a8decccf4d0a6b925af707a36077a9
26a0febc9c3d91e75410f74b9ec62099ba1cbe90
09e0e638a6f53c0fdcfeeb8ae91f3a404bef47b471324e335e29be14a2aa87f7
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 3747
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Wed, 11 Jan 2017 22:35:32 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/jet-menu/assets/public/lib/vue/vue.min.js?ver=2.6.11
200 OK 42 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/jet-menu/assets/public/lib/vue/vue.min.js?ver=2.6.11
IP
Hash 079bbfe52db865fe78ac6968045a7a71
48f8ab08e198d07e4e6963f195494c5aa8fbce51
b773edc25ad2e3b822ae1a00780e58ea0f935589eb67f6b6f20aa9faae9a962e
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/jet-menu/assets/public/lib/vue/vue.min.js?ver=2.6.11 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 15 Aug 2022 22:54:05 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
X-Firefox-Spdy: h2
www.metricbolt.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
200 OK 8.2 kB URL HTTP/2 www.metricbolt.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash a0a1c8194f131320e1798f90a7b1262a
3346d35be1f2e4886f19e7fcc0cc96ee4753d9ed
7f618ab13cec0933ec2c61fa2b580ad77ca41522028649677494219fa9ce56db
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 8169
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Sat, 09 Apr 2022 06:37:18 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.8
200 OK 16 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.8
IP
File type ASCII text, with very long lines (40474)
Hash eb7e2c1cbf83cab4aa6a7fef0dd47eb2
774647abb91ffaee699a8047c9d2fd8a65daff35
bdb3c3194100984be02d52864d7ade76025aa5c3028133d27d947ffb2a75b1e7
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.8 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 16151
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Sun, 02 Oct 2022 20:12:12 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.7.7
200 OK 7.0 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.7.7
IP
File type ASCII text, with very long lines (24339)
Hash 03a3f9b71b2a14c610dfb4113ee26f72
9eee60a912affe49ce0528cf2467490063dc6b5d
c8d6e22cb9bf7c537a6816d267544cb3831bbb494892cc74c88c2f89c5d0aec0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.7.7 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 7047
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Tue, 20 Sep 2022 20:03:00 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F84809f37-0e01-4278-ba97-357c4a1b454e.webp
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F84809f37-0e01-4278-ba97-357c4a1b454e.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1ee464d6a426da49571c97060e65a4e8
aef2208c82085b4dc8472ee28bc63b9a8832fe0e
704e9800cb12b9b2927e85901b21fbb22303f11bf4b052340d0fc610414e2a6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F84809f37-0e01-4278-ba97-357c4a1b454e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5517
x-amzn-requestid: 560e0ccc-0551-461d-98fd-f94d9a026fb8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aX-pSExDIAMFpMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6353116e-0420e4ac6cceec1749a44819;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 21:38:54 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: TDa1YZjZ70BYwTbiiaBV1J1WVtzXpAZ1j-wKfsviXvhbhnc8f0Huiw==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Fri, 21 Oct 2022 22:02:32 GMT
age: 70391
etag: "aef2208c82085b4dc8472ee28bc63b9a8832fe0e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/jet-menu/includes/elementor/assets/public/js/legacy/widgets-scripts.js?ver=2.2.3
200 OK 4.0 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/jet-menu/includes/elementor/assets/public/js/legacy/widgets-scripts.js?ver=2.2.3
IP
File type ASCII text, with very long lines (2070)
Hash 30aabacbfb8f44c3c7e871c995507d28
70551f0fda0e573d5ab836eab40eb6ad08ece663
cfd1ba28610d2a9e81d593c106b2dc9e21d1600c2445414ac80d7af3247d8c5b
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/jet-menu/includes/elementor/assets/public/js/legacy/widgets-scripts.js?ver=2.2.3 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 4026
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 15 Aug 2022 22:54:05 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/jet-tabs/assets/js/jet-tabs-frontend.min.js?ver=2.1.19
200 OK 6.4 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/jet-tabs/assets/js/jet-tabs-frontend.min.js?ver=2.1.19
IP
File type ASCII text, with very long lines (16685), with no line terminators
Hash 650a02b9ee5e8792d46a968ae580f016
aecc85be044effcb7c42fdaf770988a9bac27659
5cad4be2c3d054a02fafce3fb7ee89738da1fd5b4005c1e715b761e135f6fb3e
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/jet-tabs/assets/js/jet-tabs-frontend.min.js?ver=2.1.19 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 6379
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 15 Aug 2022 22:54:11 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f1b833a135e4d839859e4994f349bb6c
399b607015c4d9200df20084c7396591007dc995
28db09a2a0e821b37dc1cfb710bf896c438755bfc992eb775f41128b0e52e5d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28DB09A2A0E821B37DC1CFB710BF896C438755BFC992EB775F41128B0E52E5D1"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11992
Expires: Sat, 22 Oct 2022 20:55:35 GMT
Date: Sat, 22 Oct 2022 17:35:43 GMT
Connection: keep-alive
www.metricbolt.com/wp-content/plugins/wp-rocket/assets/js/lazyload/17.5/lazyload.min.js
200 OK 3.3 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/wp-rocket/assets/js/lazyload/17.5/lazyload.min.js
IP
File type ASCII text, with very long lines (8290)
Hash 2449a77badee23a0201f15cf944a9c19
ef49f2c5417427fadfcf2576b2abb36d95219cf6
16e6ae5c7a55506aef550837228b621a5f5a791a3af0ac6ded4a2e41a3fee0f3
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/wp-rocket/assets/js/lazyload/17.5/lazyload.min.js HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 3270
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 26 Sep 2022 18:57:22 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F428e118d-55db-4b2d-9dc1-0adbc5a4021a.webp
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F428e118d-55db-4b2d-9dc1-0adbc5a4021a.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a361cef05d531426819a2bffd8ab1e47
9c8050ffd0de58005705219ec70b6e4352e35b5e
0c3c48b96adb7c1dc8a8c3771878dcbab80bbbb9f2d6998038bf5d43831b578b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F428e118d-55db-4b2d-9dc1-0adbc5a4021a.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8856
x-amzn-requestid: 84cc5c28-b71f-4ada-9d3b-e67e820cd080
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aX-LzHcsoAMFuNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635310b1-6b44e77726dc2003052ce387;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 21:35:45 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qZ8wiQp_Cnx6_fT-TrOCKmkrcpYHyhByOvYpgE9XWkA0VUGxjs6cSw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 21 Oct 2022 22:06:06 GMT
age: 70177
etag: "9c8050ffd0de58005705219ec70b6e4352e35b5e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff28bcb97-99c1-48e0-b7d7-8bfe823abaa7.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff28bcb97-99c1-48e0-b7d7-8bfe823abaa7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26c47e4b0147f8dee3e71a53a8f2830c
381edb4758da428db5ffe884f8fb38bf11044f69
b507898359abbcb1f57821c147a58df66d7e81acc198afc997527b58cd835b39
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff28bcb97-99c1-48e0-b7d7-8bfe823abaa7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11151
x-amzn-requestid: 5c32e307-f2a7-4050-a96f-a47667ec4752
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aX-NEFTKoAMFsSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635310b9-2fc77f394ca297126abaed94;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 21:35:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: JOZwwfasalOC-qk9FERBCqhR9jOp1svTRJxaA40zR6p6yta1_W1dVA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 21 Oct 2022 22:06:07 GMT
age: 70176
etag: "381edb4758da428db5ffe884f8fb38bf11044f69"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f1b833a135e4d839859e4994f349bb6c
399b607015c4d9200df20084c7396591007dc995
28db09a2a0e821b37dc1cfb710bf896c438755bfc992eb775f41128b0e52e5d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28DB09A2A0E821B37DC1CFB710BF896C438755BFC992EB775F41128B0E52E5D1"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11992
Expires: Sat, 22 Oct 2022 20:55:35 GMT
Date: Sat, 22 Oct 2022 17:35:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f1b833a135e4d839859e4994f349bb6c
399b607015c4d9200df20084c7396591007dc995
28db09a2a0e821b37dc1cfb710bf896c438755bfc992eb775f41128b0e52e5d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28DB09A2A0E821B37DC1CFB710BF896C438755BFC992EB775F41128B0E52E5D1"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11992
Expires: Sat, 22 Oct 2022 20:55:35 GMT
Date: Sat, 22 Oct 2022 17:35:43 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f5552d5-4394-409a-9a9c-43e4ebf38ee1.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f5552d5-4394-409a-9a9c-43e4ebf38ee1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cdaacab30d73a7d05180cc16f4a96a3f
6cc0e39e0decbc20c765f171f63affd85fc9e6da
f015c3b1d838bd7d100ee104551bed2bb06a512b20ce3e5ac419d54b747fadd0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f5552d5-4394-409a-9a9c-43e4ebf38ee1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10720
x-amzn-requestid: 96267527-f482-4bfa-ba7a-12467408efe9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aX-MvGutIAMFc8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635310b7-25f2624559b0fb7d62ced3a3;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 21:35:51 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 4--AiSTKMMOm9HnJL_ervFnd5rkQ-WZfGM-FNkxXKO892SPw67cxXA==
via: 1.1 1f6e68152880a39d72e6bf2996cd6a60.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 21 Oct 2022 22:11:42 GMT
age: 69841
etag: "6cc0e39e0decbc20c765f171f63affd85fc9e6da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 794a6d2df00fc15e8b4ed6ff4992525e
f8d67c7fd506709d7232298859fe2b3daf374f29
02d38690754b5d99178d576fe6df6c1ca881a2bbd806a75c633c371fac0221da
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 22 Oct 2022 17:35:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bade1dd-24b1-4bae-9ace-a120c6729946.jpeg
200 OK 2.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bade1dd-24b1-4bae-9ace-a120c6729946.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 76fdbaaa2ef28349492bdf0e44fa1208
6769eeb6762a3dd7dacf6a054fedf043acb463df
8c8b2db96e764f97aa91bd800b2a6f7bf6c9d96a9dd67f919f27b53074e339e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bade1dd-24b1-4bae-9ace-a120c6729946.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2305
x-amzn-requestid: d44cceea-ab77-400f-a7a6-ed80b9873106
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aE95TG2YoAMFiiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b76a1-57ed4d9437044cc1665e535b;Sampled=0
x-amzn-remapped-date: Sun, 16 Oct 2022 03:12:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: eflm34vllgs18pHs0oGCIeDfBFnUu-ONYvvZAI6Iru52BCy2Ls0cIw==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 22 Oct 2022 07:45:22 GMT
age: 35421
etag: "6769eeb6762a3dd7dacf6a054fedf043acb463df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd771af0d-55ee-450f-bbb3-a9e419e74a51.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd771af0d-55ee-450f-bbb3-a9e419e74a51.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 616e14aee034bbf77c3b74b3ea53961b
ebf69c1ff6dc9450f33aef5dc2403d4df17a4c2c
0ae716474e2837c90c658d635fb9db2c8d4cdb7bf025b8e4e9e802e3ff56b0c3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd771af0d-55ee-450f-bbb3-a9e419e74a51.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7372
x-amzn-requestid: 080f5f7f-51a8-4ef5-9acc-0c7f7f64defb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aX-ojEg2IAMFjPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63531169-5106c8af6e77450c33a0c899;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 21:38:49 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: vP9aRT8xL5F2kf36A-lMaIQ9FSAEUGo8jmx9y63iIBDdyWYujkXXPw==
via: 1.1 2e20768704c71ff3ce2e677251d27f3c.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 21 Oct 2022 22:05:57 GMT
age: 70186
etag: "ebf69c1ff6dc9450f33aef5dc2403d4df17a4c2c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/uploads/2021/12/metric-bolt-military-fasteners.png
200 OK 1.2 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/2021/12/metric-bolt-military-fasteners.png
IP
File type PNG image data, 1911 x 137, 4-bit colormap, non-interlaced\012- data
Hash 41719b7e20ba3dc55cba6838391b3b3a
6ae2fe43ecebb67947de2424370f4c06e9efec48
051246fef526253a96eaa1e970ecbb855e8eb2b890f8348d5cc53fdd6ac1ca84
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2021/12/metric-bolt-military-fasteners.png HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.metricbolt.com/wp-content/uploads/elementor/css/post-427.css?ver=1665959444
Cookie: apbct_timestamp=1666460143; apbct_site_landing_ts=1666460142; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_prev_referer%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522792726c11479598e724df6f86fa4ffab%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2F%3Flocal_ga_js%3D245d8d49eb77f9c7bc3d4ac797d93bd6%22%3A%5B1666460143%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0; apbct_prev_referer=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: image/png
content-length: 1207
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Tue, 04 Oct 2022 22:14:24 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/uploads/2021/12/specialty-metric-fasteners.jpeg
200 OK 18 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/2021/12/specialty-metric-fasteners.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x481, components 3\012- data
Hash f289feb43f490bb14872865d5404ba28
f488c0538a5194748b65c4e9ecf1588c72df9859
18fc696a53fbeca570564a956064b41c1a95a631783b01ce953c0cb4b9d0b5b2
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/uploads/2021/12/specialty-metric-fasteners.jpeg HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.metricbolt.com/wp-content/uploads/elementor/css/post-432.css?ver=1665886949
Cookie: apbct_timestamp=1666460143; apbct_site_landing_ts=1666460142; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_prev_referer%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522792726c11479598e724df6f86fa4ffab%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2F%3Flocal_ga_js%3D245d8d49eb77f9c7bc3d4ac797d93bd6%22%3A%5B1666460143%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0; apbct_prev_referer=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: image/jpeg
content-length: 18168
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Sat, 11 Jun 2022 02:31:45 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/uploads/2022/06/specialty-metric-fasteners.jpeg
200 OK 18 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/2022/06/specialty-metric-fasteners.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x481, components 3\012- data
Hash f289feb43f490bb14872865d5404ba28
f488c0538a5194748b65c4e9ecf1588c72df9859
18fc696a53fbeca570564a956064b41c1a95a631783b01ce953c0cb4b9d0b5b2
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/uploads/2022/06/specialty-metric-fasteners.jpeg HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.metricbolt.com/wp-content/uploads/elementor/css/post-432.css?ver=1665886949
Cookie: apbct_timestamp=1666460143; apbct_site_landing_ts=1666460142; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_prev_referer%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522792726c11479598e724df6f86fa4ffab%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2F%3Flocal_ga_js%3D245d8d49eb77f9c7bc3d4ac797d93bd6%22%3A%5B1666460143%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0; apbct_prev_referer=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: image/jpeg
content-length: 18168
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 09 Jun 2022 02:06:36 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
Cookie: apbct_timestamp=1666460143; apbct_site_landing_ts=1666460142; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_prev_referer%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522792726c11479598e724df6f86fa4ffab%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2F%3Flocal_ga_js%3D245d8d49eb77f9c7bc3d4ac797d93bd6%22%3A%5B1666460143%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0; apbct_prev_referer=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: font/woff2
content-length: 78196
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 17 Jun 2021 15:07:24 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.16.0
200 OK 93 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.16.0
IP
File type Web Open Font Format (Version 2), TrueType, length 93372, version 1.0\012- data
Hash aab0bb3379e0eb7ebc26071db61fbd57
711c8d350c4192c2f1aa7f73551445b89fb4b161
691fa7d17effc7d303eda0ad7e4a1d91b2f375506cfc8a774480cc2b55f156ea
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.16.0 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.metricbolt.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
Cookie: apbct_timestamp=1666460143; apbct_site_landing_ts=1666460142; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_prev_referer%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522792726c11479598e724df6f86fa4ffab%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2F%3Flocal_ga_js%3D245d8d49eb77f9c7bc3d4ac797d93bd6%22%3A%5B1666460143%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0; apbct_prev_referer=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: font/woff2
content-length: 93372
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 01 Aug 2022 05:11:38 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 09f1d552877c07059a3c8debf4187f12
5832bc57522a3fda9a0fec7288076db87d4560c5
de8ad3e1d71f1e4f709bed37590b5e0cdb520db9a246e57d212036af8cfc0f18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 22 Oct 2022 17:35:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9f84a11cd39c014fffc187f2a8b0d8df
1875e117dec3fc707db902e87df9ec691b2cc763
bf0c0ac413147f09128a7af625499402eea897c3efad12828347efaba9b9d3a1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 22 Oct 2022 17:35:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9f84a11cd39c014fffc187f2a8b0d8df
1875e117dec3fc707db902e87df9ec691b2cc763
bf0c0ac413147f09128a7af625499402eea897c3efad12828347efaba9b9d3a1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 22 Oct 2022 17:35:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.metricbolt.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Oct 2022 16:40:18 GMT
expires: Fri, 20 Oct 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 176125
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 09f1d552877c07059a3c8debf4187f12
5832bc57522a3fda9a0fec7288076db87d4560c5
de8ad3e1d71f1e4f709bed37590b5e0cdb520db9a246e57d212036af8cfc0f18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 22 Oct 2022 17:35:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.metricbolt.com/wp-content/uploads/2022/01/cropped-military-fasteners-florida-192x192.png
200 OK 12 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/2022/01/cropped-military-fasteners-florida-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 44a025ccad7458877da8d4aeb67506b7
dac47945ef751d30b9933bb23504d4aa0d190a73
f4e33db5a328b9037b7dc4325d5db9bcbcd63cc2af2b65f1ff96dee448785b2a
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/01/cropped-military-fasteners-florida-192x192.png HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460143; apbct_site_landing_ts=1666460142; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_prev_referer%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522792726c11479598e724df6f86fa4ffab%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2F%3Flocal_ga_js%3D245d8d49eb77f9c7bc3d4ac797d93bd6%22%3A%5B1666460143%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0; apbct_prev_referer=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: image/png
content-length: 11985
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 24 Jan 2022 20:16:49 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/uploads/2022/01/cropped-military-fasteners-florida-32x32.png
200 OK 1.3 kB URL HTTP/2 www.metricbolt.com/wp-content/uploads/2022/01/cropped-military-fasteners-florida-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 10970ebcc4f9e33593167fb0024dcf04
fd6729dd54a9702c080f71aa2abd49da426e9343
802df064d87ce6d979919fa524485c300d120f26bbbec8d800ee2792377c0ca5
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/01/cropped-military-fasteners-florida-32x32.png HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460143; apbct_site_landing_ts=1666460142; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_prev_referer%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522792726c11479598e724df6f86fa4ffab%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2F%3Flocal_ga_js%3D245d8d49eb77f9c7bc3d4ac797d93bd6%22%3A%5B1666460143%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0; apbct_prev_referer=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: image/png
content-length: 1338
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 24 Jan 2022 20:16:49 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/js/image-carousel.e02695895b33b77d89de.bundle.min.js
200 OK 1.3 kB URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/js/image-carousel.e02695895b33b77d89de.bundle.min.js
IP
File type ASCII text, with very long lines (2738)
Hash ccac23ee321b604f44a5f280bde7cb85
8def3216e6cbb9d911fd47451de2ea374da86ff8
2c6f3015735cfe29bf48acf9cfa1586d7bb3462a7bcc84741662c30b1bee0f58
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/image-carousel.e02695895b33b77d89de.bundle.min.js HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460143; apbct_site_landing_ts=1666460142; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_prev_referer%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522792726c11479598e724df6f86fa4ffab%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2F%3Flocal_ga_js%3D245d8d49eb77f9c7bc3d4ac797d93bd6%22%3A%5B1666460143%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0; apbct_prev_referer=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi; ct_ps_timestamp=1666460158; ct_fkp_timestamp=0; ct_pointer_data=0; ct_timezone=0; ct_screen_info=%7B%22fullWidth%22%3A1268%2C%22fullHeight%22%3A1581%2C%22visibleWidth%22%3A1268%2C%22visibleHeight%22%3A939%7D; apbct_headless=false; ct_checked_emails=0; ct_checkjs=8d64fd451456c4de5b942d7d0352c4bd2250af54a3139e8529780958e9694680
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:44 GMT
content-type: application/javascript; charset=utf-8
content-length: 1272
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Sun, 02 Oct 2022 20:12:12 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js
200 OK 671 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js
IP
File type ASCII text, with very long lines (1320)
Hash 5ccb71a38d381c56ef048a0608f55dcc
c19eef8a9e0a40b3d1b01d0bf6868762316db311
b0f9cf59a8daca1c19fb220bdaba817c5745c2565bfcbcadf8f5d2b8e2962022
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460143; apbct_site_landing_ts=1666460142; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_prev_referer%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522792726c11479598e724df6f86fa4ffab%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2F%3Flocal_ga_js%3D245d8d49eb77f9c7bc3d4ac797d93bd6%22%3A%5B1666460143%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0; apbct_prev_referer=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi; ct_ps_timestamp=1666460158; ct_fkp_timestamp=0; ct_pointer_data=0; ct_timezone=0; ct_screen_info=%7B%22fullWidth%22%3A1268%2C%22fullHeight%22%3A1581%2C%22visibleWidth%22%3A1268%2C%22visibleHeight%22%3A939%7D; apbct_headless=false; ct_checked_emails=0; ct_checkjs=8d64fd451456c4de5b942d7d0352c4bd2250af54a3139e8529780958e9694680
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:44 GMT
content-type: application/javascript; charset=utf-8
content-length: 671
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Sun, 02 Oct 2022 20:12:12 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 94ee541bb392e5675c1e24c94c197f8b
bce18b05a24f5e2c6743cbbe849a733091586176
82f791c205847646216d72b4ce65bc3587ca69d1da17a3a2afb477640822c4dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 22 Oct 2022 17:35:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-CHVQ577TGM&l=dataLayer&cx=c
200 OK 70 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-CHVQ577TGM&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (7601)
Hash 5f7c6e6b6e0a2363b6c90814958423c5
27337456bf3878ac5e5638feb2fcd5f54a8baf71
a45958bda2b22a01b309f42a26e86a2d88a5e517b6d8c0fed90963fb3b81b30b
GET /gtag/js?id=G-CHVQ577TGM&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 22 Oct 2022 17:35:43 GMT
expires: Sat, 22 Oct 2022 17:35:43 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69970
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 94ee541bb392e5675c1e24c94c197f8b
bce18b05a24f5e2c6743cbbe849a733091586176
82f791c205847646216d72b4ce65bc3587ca69d1da17a3a2afb477640822c4dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 22 Oct 2022 17:35:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.metricbolt.com/wp-json/cleantalk-antispam/v1/apbct_get_pixel_url
200 OK 94 B URL HTTP/2 www.metricbolt.com/wp-json/cleantalk-antispam/v1/apbct_get_pixel_url
IP
File type ASCII text, with no line terminators
Hash 691df398eb2f7f2ffdca187758fe1971
09f44abb5de6820b8ac26c279c99bdb7f4166684
d3d85ed7ea15963121d3e15c4b86c494204bdbc32391e962041deb7b9d05885e
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
POST /wp-json/cleantalk-antispam/v1/apbct_get_pixel_url HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
X-WP-Nonce: 343ba9accb
Origin: https://www.metricbolt.com
Connection: keep-alive
Cookie: apbct_timestamp=1666460143; apbct_site_landing_ts=1666460142; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_prev_referer%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522792726c11479598e724df6f86fa4ffab%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2F%3Flocal_ga_js%3D245d8d49eb77f9c7bc3d4ac797d93bd6%22%3A%5B1666460143%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0; apbct_prev_referer=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi; ct_ps_timestamp=1666460158; ct_fkp_timestamp=0; ct_pointer_data=0; ct_timezone=0; ct_screen_info=%7B%22fullWidth%22%3A1268%2C%22fullHeight%22%3A1581%2C%22visibleWidth%22%3A1268%2C%22visibleHeight%22%3A939%7D; apbct_headless=false; ct_checked_emails=0; ct_checkjs=8d64fd451456c4de5b942d7d0352c4bd2250af54a3139e8529780958e9694680
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:44 GMT
content-type: application/json; charset=UTF-8
content-length: 94
x-sucuri-id: 19015
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-xss-protection: 1; mode=block, 1; mode=block
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, sameorigin
x-robots-tag: noindex
link: <https://www.metricbolt.com/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff, nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
x-wp-nonce: 343ba9accb
allow: POST
access-control-allow-origin: https://www.metricbolt.com
access-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE
access-control-allow-credentials: true
vary: Origin,Accept-Encoding,User-Agent
set-cookie: apbct_timestamp=1666460143; path=/; secure; SameSite=Lax
apbct_prev_referer=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi; path=/; secure; HttpOnly; SameSite=Lax
apbct_page_hits=3; path=/; secure; HttpOnly; SameSite=Lax
apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_prev_referer%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%25221d30e28dbcce104b720dc15952578aaf%2522%257D; path=/; secure; HttpOnly; SameSite=Lax
apbct_urls=%7B%22www.metricbolt.com%2F%3Flocal_ga_js%3D245d8d49eb77f9c7bc3d4ac797d93bd6%22%3A%5B1666460143%5D%2C%22www.metricbolt.com%2Fwp-json%2Fcleantalk-antispam%2Fv1%2Fapbct_get_pixel_url%22%3A%5B1666460143%5D%7D; expires=Tue, 25-Oct-2022 17:35:43 GMT; Max-Age=259200; path=/; domain=www.metricbolt.com; secure; HttpOnly; SameSite=Lax
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
cache-control: max-age=0
expires: Sat, 22 Oct 2022 17:35:43 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 34ad7dcddfd40072285cd067df5225b7
a6e1bae9c0973794393114771596539410b53b61
353ef4300478bee8b1cf87e95a61046fbdff44f8a65e89b764cc089c15a03b91
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 22 Oct 2022 17:35:44 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 20 Oct 2022 02:00:02 GMT
Expires: Thu, 27 Oct 2022 02:00:01 GMT
Etag: "a6e1bae9c0973794393114771596539410b53b61"
Cache-Control: max-age=375256,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75e3fdbe6900b521-OSL
moderate6.cleantalk.org/pixel/fd9ca0b7af1bdade7f7609b747fe5b9a.gif
200 OK 43 B URL HTTP/1.1 moderate6.cleantalk.org/pixel/fd9ca0b7af1bdade7f7609b747fe5b9a.gif
IP
ASN #14061 DIGITALOCEAN-ASN
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pixel/fd9ca0b7af1bdade7f7609b747fe5b9a.gif HTTP/1.1
Host: moderate6.cleantalk.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 22 Oct 2022 17:35:44 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-CHVQ577TGM>m=2oeaj0&_p=1597659283&cid=901169942.1666460159&ul=en-us&sr=1280x1024&_s=1&sid=1666460158&sct=1&seg=0&dl=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi&dt=Page%20Not%20Found%20-%20Metric%20Bolt&en=page_view&_fv=2&_nsi=1&_ss=1&_ee=1&ep.anonymize_ip=true
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-CHVQ577TGM>m=2oeaj0&_p=1597659283&cid=901169942.1666460159&ul=en-us&sr=1280x1024&_s=1&sid=1666460158&sct=1&seg=0&dl=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi&dt=Page%20Not%20Found%20-%20Metric%20Bolt&en=page_view&_fv=2&_nsi=1&_ss=1&_ee=1&ep.anonymize_ip=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-CHVQ577TGM>m=2oeaj0&_p=1597659283&cid=901169942.1666460159&ul=en-us&sr=1280x1024&_s=1&sid=1666460158&sct=1&seg=0&dl=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi&dt=Page%20Not%20Found%20-%20Metric%20Bolt&en=page_view&_fv=2&_nsi=1&_ss=1&_ee=1&ep.anonymize_ip=true HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/
Origin: https://www.metricbolt.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.metricbolt.com
date: Sat, 22 Oct 2022 17:35:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
200 OK 0 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
IP
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460143; apbct_site_landing_ts=1666460142; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_prev_referer%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522792726c11479598e724df6f86fa4ffab%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2F%3Flocal_ga_js%3D245d8d49eb77f9c7bc3d4ac797d93bd6%22%3A%5B1666460143%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0; apbct_prev_referer=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi; ct_ps_timestamp=1666460158; ct_fkp_timestamp=0; ct_pointer_data=0; ct_timezone=0; ct_screen_info=%7B%22fullWidth%22%3A1268%2C%22fullHeight%22%3A1581%2C%22visibleWidth%22%3A1268%2C%22visibleHeight%22%3A939%7D; apbct_headless=false; ct_checked_emails=0; ct_checkjs=8d64fd451456c4de5b942d7d0352c4bd2250af54a3139e8529780958e9694680
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:44 GMT
content-type: application/javascript; charset=utf-8
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 01 Jun 2020 21:47:40 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.ttf?5.15.0
200 OK 0 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.ttf?5.15.0
IP
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.ttf?5.15.0 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: font/ttf
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 01 Aug 2022 05:11:38 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.15.0
200 OK 0 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.15.0
IP
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.15.0 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: font/woff2
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 01 Aug 2022 05:11:38 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff?5.15.0
200 OK 0 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff?5.15.0
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff?5.15.0 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: font/woff
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 01 Aug 2022 05:11:38 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf
200 OK 0 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf
IP
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: font/ttf
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 17 Jun 2021 15:07:24 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/jet-elements/assets/js/jet-elements.min.js?ver=2.6.7
200 OK 0 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/jet-elements/assets/js/jet-elements.min.js?ver=2.6.7
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/jet-elements/assets/js/jet-elements.min.js?ver=2.6.7 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 15 Aug 2022 22:53:57 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/cleantalk-spam-protect/js/apbct-public-bundle.min.js?ver=5.187
200 OK 0 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/cleantalk-spam-protect/js/apbct-public-bundle.min.js?ver=5.187
IP
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/cleantalk-spam-protect/js/apbct-public-bundle.min.js?ver=5.187 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 20 Oct 2022 11:09:16 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
X-Firefox-Spdy: h2
www.metricbolt.com/?local_ga_js=245d8d49eb77f9c7bc3d4ac797d93bd6
200 OK 0 B URL HTTP/2 www.metricbolt.com/?local_ga_js=245d8d49eb77f9c7bc3d4ac797d93bd6
IP
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /?local_ga_js=245d8d49eb77f9c7bc3d4ac797d93bd6 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript
x-sucuri-id: 19015
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-xss-protection: 1; mode=block, 1; mode=block
x-content-type-options: nosniff, nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, sameorigin
set-cookie: apbct_timestamp=1666460143; path=/; secure; SameSite=Lax
apbct_prev_referer=https%3A%2F%2Fwww.metricbolt.com%2Fesie%2Fularaoqldmoi; path=/; secure; HttpOnly; SameSite=Lax
apbct_page_hits=2; path=/; secure; HttpOnly; SameSite=Lax
apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_prev_referer%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522792726c11479598e724df6f86fa4ffab%2522%257D; path=/; secure; HttpOnly; SameSite=Lax
apbct_urls=%7B%22www.metricbolt.com%2F%3Flocal_ga_js%3D245d8d49eb77f9c7bc3d4ac797d93bd6%22%3A%5B1666460143%5D%7D; expires=Tue, 25-Oct-2022 17:35:43 GMT; Max-Age=259200; path=/; domain=www.metricbolt.com; secure; HttpOnly; SameSite=Lax
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
cache-control: max-age=604800, public, max-age=31536000
expires: Sun, 22 Oct 2023 17:35:43 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: MISS
X-Firefox-Spdy: h2
www.metricbolt.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 0 B URL HTTP/2 www.metricbolt.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: application/javascript; charset=utf-8
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 11 Mar 2021 02:37:24 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.7.8
200 OK 0 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.7.8
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.7.8 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Sun, 02 Oct 2022 20:12:12 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/jet-elements/assets/css/jet-elements.css?ver=2.6.7
200 OK 0 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/jet-elements/assets/css/jet-elements.css?ver=2.6.7
IP
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/jet-elements/assets/css/jet-elements.css?ver=2.6.7 HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: text/css; charset=utf-8
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Mon, 15 Aug 2022 22:53:57 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.ttf
200 OK 0 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.ttf
IP
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.ttf HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: font/ttf
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 17 Jun 2021 15:07:24 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
X-Firefox-Spdy: h2
www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff
200 OK 0 B URL HTTP/2 www.metricbolt.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff
IP
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff HTTP/1.1
Host: www.metricbolt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.metricbolt.com/esie/ularaoqldmoi
Connection: keep-alive
Cookie: apbct_timestamp=1666460142; apbct_site_landing_ts=1666460142; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522fd643ab19e1fb78114e26e7be14e33b5%2522%257D; apbct_urls=%7B%22www.metricbolt.com%2Fesie%2Fularaoqldmoi%22%3A%5B1666460142%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=30223e37c5d1522e32f1e62a053cf87b0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 22 Oct 2022 17:35:43 GMT
content-type: font/woff
content-length: 16253
x-sucuri-id: 19015
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests ;
last-modified: Thu, 17 Jun 2021 15:07:24 GMT
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
192.124.249.15
104.18.32.68
23.36.77.32
93.184.220.29