| assets.pikiran-rakyat.com/crop/0x0:0x0/x/photo/2022/05/24/3190036480.jpg |  172.67.68.105 | 200 OK | 44 kB |
URL GET HTTP/2assets.pikiran-rakyat.com/crop/0x0:0x0/x/photo/2022/05/24/3190036480.jpg IP172.67.68.105:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectpikiran-rakyat.com FingerprintF2:B1:84:DC:02:96:86:B3:FC:F2:0A:5E:E1:44:8B:DC:E3:ED:F8:98 ValiditySun, 17 Mar 2024 01:09:55 GMT - Sat, 15 Jun 2024 01:09:54 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 946x521, Scaling: [none]x[none], YUV color, decoders should clamp Hasha3c36d064a4bd43aac2085d667295050 616ffd2f5b62bba1df4532eb54c5a078cfae891f e93f1e043900ea1dc3a0e2889bbdacddb3b90e6a5de1a454c02d63fa61c1db92
GET /crop/0x0:0x0/x/photo/2022/05/24/3190036480.jpg HTTP/1.1
Host: assets.pikiran-rakyat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: image/webp
content-length: 43712
access-control-allow-methods: GET, OPTION
access-control-allow-origin: *
cache-control: max-age=31536000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=55345
content-disposition: inline; filename="3190036480.webp"
etag: "9b941a5ed03f13218c169c53963d417865102206"
expires: Fri, 02 May 2025 06:17:08 GMT
vary: Accept
x-cache-status: MISS
cf-cache-status: HIT
age: 148834
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gn1Yz%2FNm8zewz75ZoYxKONVfzGDcnaZNWLtnQg0TdmsPTgQgnsT7AkEIYspAAq86xDsq%2FY3R%2FoWGis8npK1DV7Re2NTanCt9kPNHy%2BHoGSG79o3PDHfXxEzU5IUhNswyFO68UUF79SQqzko%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e4149c6b1c56ba-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.cinestellacolonia.com/wp-content/uploads/2024/01/mesin-slot-online.jpg |  104.21.79.36 | 200 OK | 68 kB |
URL GET HTTP/2www.cinestellacolonia.com/wp-content/uploads/2024/01/mesin-slot-online.jpg IP104.21.79.36:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectcinestellacolonia.com Fingerprint32:B0:B3:9A:45:2E:5B:CE:F7:BF:FA:D5:40:A0:4A:17:A0:59:98:B1 ValidityThu, 07 Mar 2024 01:48:17 GMT - Wed, 05 Jun 2024 01:48:16 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 750x400, components 3 Hash89214ced3df6a9505b05a3a2751ce8d4 a5fd1e40ef0059d8cc64db2a57c2ba712bcbaf06 c6ea256abc428cda8ec4a738afe6957fa9550ca1d9f8209c3c258d7fd1d3ae58
GET /wp-content/uploads/2024/01/mesin-slot-online.jpg HTTP/1.1
Host: www.cinestellacolonia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: image/jpeg
content-length: 67748
cache-control: public, max-age=604800
expires: Thu, 09 May 2024 06:17:08 GMT
etag: "108a4-65a7b000-364bbb;;;"
last-modified: Wed, 17 Jan 2024 10:46:24 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 148835
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9vd0e9x82NCnycdlMDjMJvovXr%2F3LkhvtjbCLuoonWl0Kreg8R5xtEsAlo%2BVlbeOX9qalMkBudT%2FKRo8fHqNxiYu4evuBDe7Agto%2BGdnrlsbDPN97beqa22KCFUy0GbGm92yBTOW0Xa5Uv1V"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4149c6e7f568e-OSL
X-Firefox-Spdy: h2
|
|
| www.reloadparadise-files.net/wp-content/uploads/2024/02/situs-daftar-agen-judi-slot-online-indonesia-terbaik-taruhan-uang-asli-1.jpg | 172.67.219.29 | 200 OK | 119 kB |
URL GET HTTP/2www.reloadparadise-files.net/wp-content/uploads/2024/02/situs-daftar-agen-judi-slot-online-indonesia-terbaik-taruhan-uang-asli-1.jpg IP172.67.219.29:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectreloadparadise-files.net Fingerprint0C:BD:53:18:8B:74:6A:C0:95:8C:6B:A4:4B:46:3F:22:18:33:40:CD ValidityWed, 20 Mar 2024 23:16:50 GMT - Tue, 18 Jun 2024 23:16:49 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x476, components 3 Size119 kB (118730 bytes) Hash7cad4ca1b84f6e23ff2de223d186920c 675db6015057728be49282798342e5166a0c5fad a75323c4d8bbcac2b8beb78c03673ed5456ce6f50f298ee438044cb2ca1348eb
GET /wp-content/uploads/2024/02/situs-daftar-agen-judi-slot-online-indonesia-terbaik-taruhan-uang-asli-1.jpg HTTP/1.1
Host: www.reloadparadise-files.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: image/jpeg
content-length: 118730
cache-control: public, max-age=604800
expires: Thu, 09 May 2024 06:17:08 GMT
etag: "1cfca-65d7eace-260c5d;;;"
last-modified: Fri, 23 Feb 2024 00:46:06 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 148835
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B%2FEhzCsN8%2FuZgrFNwd7EXRj5ZnGMWxUfjO9QW9RnqC4OiAlIpQz3%2FWAGZcXrxBJh7xn3kMknBWk%2FKhRnLn6PlbUczQhxyKMDE7y6M9zXUYXHMm7NlnYj1qNUbxxcm81JYTVnXeqCwLlBHDcA3vdA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4149c6d1c0b3d-OSL
X-Firefox-Spdy: h2
|
|
| css.cdntoswitchspirit.com/scripts/class.js | 104.21.93.126 | 200 OK | 15 kB |
URL GET HTTP/2css.cdntoswitchspirit.com/scripts/class.js IP104.21.93.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerLet's Encrypt Subjectcdntoswitchspirit.com FingerprintDF:DB:EE:70:5A:39:BB:E7:A9:C6:4B:5C:24:04:56:6B:D0:D3:C0:AD ValidityMon, 29 Apr 2024 10:49:03 GMT - Sun, 28 Jul 2024 10:49:02 GMT
File typeJavaScript source, ASCII text, with very long lines (35248), with no line terminators Hash9b5faa863a03cc97eca67fb8c63aea5d 8f5c6a97bb740bcf24f291e83a46e9aff626923b 4cb0f698f3957b9c8c6ce08c5f18d19fc90278a14f7fafe92dbe00d717bc2acb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scripts/class.js HTTP/1.1
Host: css.cdntoswitchspirit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 30 Apr 2024 15:35:29 GMT
vary: Accept-Encoding
etag: W/"66310fc1-89b0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 199288
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nTBjWG3c6yFJS%2FBxcWz0qzLnaYUz7YAtUkSlmI4zTClHanhshWTnvbnkOncJqVVW1q7lLTp%2FutH6c%2BcOK0a0kbpsnJFajdOcyUUCPpFk7oGoxzhjJYeI4we7u0k%2Fzb9WWOBHKHiscmzh9maC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e414a0c870568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuMwr7Iw.woff2 | 216.58.207.227 | 200 OK | 38 kB |
URL GET HTTP/2fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuMwr7Iw.woff2 IP216.58.207.227:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 37764, version 1.0 Hash84b1de656372d69f73c8e9273489c8e2 9427a3e557f56a3955ab3f13d99c8a0dd72ab15f 16a2619b4d831694734838f42d825eb871ee5160d241900b780ad523404b1c50
GET /s/lora/v35/0QIvMX1D_JOuMwr7Iw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://k2liquidincense-us.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 12:57:16 GMT
expires: Sat, 03 May 2025 12:57:16 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 31 Jan 2024 23:11:20 GMT
content-type: font/woff2
age: 38427
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuMwr7Iw.woff2 | 216.58.207.227 | 200 OK | 38 kB |
URL GET HTTP/2fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuMwr7Iw.woff2 IP216.58.207.227:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 37764, version 1.0 Hash84b1de656372d69f73c8e9273489c8e2 9427a3e557f56a3955ab3f13d99c8a0dd72ab15f 16a2619b4d831694734838f42d825eb871ee5160d241900b780ad523404b1c50
GET /s/lora/v35/0QIvMX1D_JOuMwr7Iw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://k2liquidincense-us.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 12:57:16 GMT
expires: Sat, 03 May 2025 12:57:16 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 31 Jan 2024 23:11:20 GMT
content-type: font/woff2
age: 38427
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.cinestellacolonia.com/wp-content/uploads/2024/02/judi-bola.webp | 104.21.79.36 | 200 OK | 19 kB |
URL GET HTTP/2www.cinestellacolonia.com/wp-content/uploads/2024/02/judi-bola.webp IP104.21.79.36:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectcinestellacolonia.com Fingerprint32:B0:B3:9A:45:2E:5B:CE:F7:BF:FA:D5:40:A0:4A:17:A0:59:98:B1 ValidityThu, 07 Mar 2024 01:48:17 GMT - Wed, 05 Jun 2024 01:48:16 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 768x354, Scaling: [none]x[none], YUV color, decoders should clamp Hashf2087029a7fa4d1ef1e526d270823a7a f1a1802f7670ad1a30d8f1f9c3fc2943f2536f1b 572da3a8f1e5e31bfdf1074b6fa2a8174e877e171eec2f694b0d73f2efed866f
GET /wp-content/uploads/2024/02/judi-bola.webp HTTP/1.1
Host: www.cinestellacolonia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: image/webp
content-length: 19378
cache-control: public, max-age=604800
expires: Fri, 10 May 2024 23:37:43 GMT
etag: "4bb2-65dae594-363ebe;;;"
last-modified: Sun, 25 Feb 2024 07:00:36 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DCWm1BaquDoQiV7U6t2bN1QBy7uZhOftICN2sgfIrmFrPQ4mEMM4qYpLpkKwKrhxz6TbEmoTZ8XO21JUd02qn5XWJdGnspWA952GM0mmoiSdozXOebfyxjKrmHDs%2Bb8KiFZXRLG9cUEQkZsk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4149c6e80568e-OSL
X-Firefox-Spdy: h2
|
|
| | 104.21.59.126 | 200 OK | 159 kB |
URL User Request GET HTTP/2IP104.21.59.126:443
CertificateIssuerGoogle Trust Services LLC Subjectk2liquidincense-us.com Fingerprint52:DF:FD:7E:B0:85:CB:F9:7A:54:FE:70:BA:5E:4B:FE:6E:DB:85:E4 ValidityWed, 27 Mar 2024 04:04:57 GMT - Tue, 25 Jun 2024 04:04:56 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (14849), with CRLF, LF line terminators Size159 kB (158913 bytes) Hashbc9ce16bcc1817f9435b7255bd6e9ace dbe29c6d25cab4096f91db46a92931dc1e145920 05d7580ff11d865a60849d7eb63388f397190500b2b9d9761b5508ae983fa91b
GET / HTTP/1.1
Host: k2liquidincense-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 23:37:42 GMT
content-type: text/html; charset=UTF-8
link: <https://k2liquidincense-us.com/wp-json/>; rel="https://api.w.org/", <https://k2liquidincense-us.com/wp-json/wp/v2/pages/9>; rel="alternate"; type="application/json", <https://k2liquidincense-us.com/>; rel=shortlink
x-litespeed-cache-control: public,max-age=300
x-litespeed-tag: a37_HTTP.200,a37_front,a37_URL.6666cd76f96956469e7be39d750cc7d9,a37_F,a37_Po.9,a37_PGS,a37_
x-litespeed-cache: miss
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5bqLJ6jPqnWVrS%2BWjLTSsdv0lSDE%2BMHJ6fdxZgK4JdRMS8au6FlFA8HbTirf3O1mqvatses65H6L3BAXMqWOBrQdUrbkHrgKQQRwkkMJpJziHqkyN4Fe4U5XIfrmVNl2%2Fi3WIBM1CBTu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e414959b3d56b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| k2liquidincense-us.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 | 104.21.59.126 | 200 OK | 9.1 kB |
URL GET HTTP/3k2liquidincense-us.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 IP104.21.59.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectk2liquidincense-us.com Fingerprint52:DF:FD:7E:B0:85:CB:F9:7A:54:FE:70:BA:5E:4B:FE:6E:DB:85:E4 ValidityWed, 27 Mar 2024 04:04:57 GMT - Tue, 25 Jun 2024 04:04:56 GMT
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1
Host: k2liquidincense-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 23:37:44 GMT
content-type: text/javascript
etag: W/"4926-660cad01-41e0c1c;br"
last-modified: Wed, 03 Apr 2024 01:12:33 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U0%2BCc7p6NypJ25J14gwwmDGT2r9hCouU7ddm3EYCk7NZFZU%2F0Zm%2BayaOqLVWhLviQj5JUMWgV78q%2BnBefaRqiWH%2BUKPIV6Zhtzl4lO6cm7UDATH6pttkThLTOEwBmS7n2XEUXWO2V0oP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e414a25a4f0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| k2liquidincense-us.com/wp-content/themes/blogi/js/skip-link-focus-fix.js?ver=20130115 | 104.21.59.126 | 200 OK | 7.0 kB |
URL GET HTTP/3k2liquidincense-us.com/wp-content/themes/blogi/js/skip-link-focus-fix.js?ver=20130115 IP104.21.59.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectk2liquidincense-us.com Fingerprint52:DF:FD:7E:B0:85:CB:F9:7A:54:FE:70:BA:5E:4B:FE:6E:DB:85:E4 ValidityWed, 27 Mar 2024 04:04:57 GMT - Tue, 25 Jun 2024 04:04:56 GMT
File typeASCII text, with CRLF line terminators Hash660b35985513fcdc6d22e3448bcf273b 3d0379ed1e3db8a2bb2b1b8403deeb16e369a24b 474070f072ec32fc498c94fb19c44597ebf4e27201572902baa4abf066687d18
GET /wp-content/themes/blogi/js/skip-link-focus-fix.js?ver=20130115 HTTP/1.1
Host: k2liquidincense-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: text/javascript
etag: W/"3a9-65ed57b6-41e00fc;br"
last-modified: Sun, 10 Mar 2024 06:48:22 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DKiU33O3qcNbiPPIojTCojtYRA6Tr23PYkawXTqE0AtS4xyzutqxeNCw5U3EUYzM3Qh1W4wOM949Yz3l47cR71sh%2F4cb1gMxSU7Oi4daiHureAYW3QX%2FchSCaY2syqI%2FAHJrd1lsHTmm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e4149c1fe90afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| k2liquidincense-us.com/wp-content/uploads/2024/04/mesin-slot-online-1.jpg | 104.21.59.126 | 200 OK | 116 kB |
URL GET HTTP/3k2liquidincense-us.com/wp-content/uploads/2024/04/mesin-slot-online-1.jpg IP104.21.59.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectk2liquidincense-us.com Fingerprint52:DF:FD:7E:B0:85:CB:F9:7A:54:FE:70:BA:5E:4B:FE:6E:DB:85:E4 ValidityWed, 27 Mar 2024 04:04:57 GMT - Tue, 25 Jun 2024 04:04:56 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 709x484, components 3 Size116 kB (115585 bytes) Hashf81d4f4c78d0fabefa40daa0fb200985 74d3e965d51228f4ea0275680dc0d19d263bee88 b3ddb5fb35ec42c047aecdcc0accf23c2708704088c86fa59c6397040dc4bf6a
GET /wp-content/uploads/2024/04/mesin-slot-online-1.jpg HTTP/1.1
Host: k2liquidincense-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: image/jpeg
content-length: 115585
cache-control: public, max-age=604800
expires: Fri, 10 May 2024 23:37:43 GMT
etag: "1c381-66224973-5f46859;;;"
last-modified: Fri, 19 Apr 2024 10:37:39 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bBZNkWDXaJbajxigtPNbFv5KAcXmTT1j9tlnRZ1y%2BiYZgHIqRXH2d8LT6o1SStovkWJBvuU6h4tY%2FTACbw%2F4FZSBnZuL9HgscdqU2bBwTNxT0vPQCIIIBxM1cO8gR%2B%2F9td1ZQtib%2FYKG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4149bffd80afa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| k2liquidincense-us.com/wp-content/themes/blogi/js/theia-sticky-sidebar.js?ver=20120206 | 104.21.59.126 | 200 OK | 15 kB |
URL GET HTTP/3k2liquidincense-us.com/wp-content/themes/blogi/js/theia-sticky-sidebar.js?ver=20120206 IP104.21.59.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectk2liquidincense-us.com Fingerprint52:DF:FD:7E:B0:85:CB:F9:7A:54:FE:70:BA:5E:4B:FE:6E:DB:85:E4 ValidityWed, 27 Mar 2024 04:04:57 GMT - Tue, 25 Jun 2024 04:04:56 GMT
File typeJavaScript source, ASCII text Hash84f79c65ec6a7dfcab0a7273052b8101 82132a19c75ff8b06f60ff21e7a2f9da4577e293 cbe37438a7d04fe51dfd3ae2618cb0586981da2a4ec0b2425edccfe54c37ce51
GET /wp-content/themes/blogi/js/theia-sticky-sidebar.js?ver=20120206 HTTP/1.1
Host: k2liquidincense-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: text/javascript
etag: W/"3a49-65ed57b6-41e00fd;br"
last-modified: Sun, 10 Mar 2024 06:48:22 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=htGy4ALUBg2TUbMKwVG9D48ZwixwkneQFLVcnFKbNo5i6QRj0j61h8KCHqXTWw%2FBeFiXJeeqiIKohjS6TKl5v7vPiu6ggyCjVE7e4T5u4pqcflxjzkrS42G8hhrPxKPsKXwm4rZET8TK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e4149c1fe50afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| k2liquidincense-us.com/wp-includes/images/w-logo-blue-white-bg.png | 104.21.59.126 | 200 OK | 4.1 kB |
URL GET HTTP/3k2liquidincense-us.com/wp-includes/images/w-logo-blue-white-bg.png IP104.21.59.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectk2liquidincense-us.com Fingerprint52:DF:FD:7E:B0:85:CB:F9:7A:54:FE:70:BA:5E:4B:FE:6E:DB:85:E4 ValidityWed, 27 Mar 2024 04:04:57 GMT - Tue, 25 Jun 2024 04:04:56 GMT
File typePNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced Hash000bf649cc8f6bf27cfb04d1bcdcd3c7 d73d2f6d74ec6cdcbae07955592962e77d8ae814 6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0
GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: k2liquidincense-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://k2liquidincense-us.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 23:37:45 GMT
content-type: image/png
content-length: 4119
cache-control: public, max-age=604800
expires: Fri, 10 May 2024 23:37:45 GMT
etag: "1017-65ed2bd3-41e0b8b;;;"
last-modified: Sun, 10 Mar 2024 03:41:07 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3nLLNCKbkxw1ApdXIi9i1IrjtuOJalNEVbM3nIuxzC%2Bji0dvhtTfvGcYJVkCYKir6CVKF6yekhFR43tuqNO4T6OcI%2B53Z5Qw0VkUiboQEpAzW6j7%2B8U7Gi9lj%2F8KakMP9c%2BCWdKyvh33"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e414a7bc750afa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Lora%3A400%2C400i%2C700%2C700i&subset=cyrillic%2Clatin-ext&ver=6.5.2 | 142.250.74.106 | 200 OK | 17 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Lora%3A400%2C400i%2C700%2C700i&subset=cyrillic%2Clatin-ext&ver=6.5.2 IP142.250.74.106:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (1572) Hashea3e7437ce0f16d8c5a905b17ba3b052 1be1b6e112371d713de9b8464034683934ecd31f 3ef2815b10a907118d66a4a205a81725742fee02e687400a27ecf7f71d18b3e3
GET /css?family=Lora%3A400%2C400i%2C700%2C700i&subset=cyrillic%2Clatin-ext&ver=6.5.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 03 May 2024 23:37:43 GMT
date: Fri, 03 May 2024 23:37:43 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| js.cdntoswitchspirit.com/source/split.js | 104.21.93.126 | 200 OK | 36 kB |
URL GET HTTP/2js.cdntoswitchspirit.com/source/split.js IP104.21.93.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerLet's Encrypt Subjectcdntoswitchspirit.com FingerprintDF:DB:EE:70:5A:39:BB:E7:A9:C6:4B:5C:24:04:56:6B:D0:D3:C0:AD ValidityMon, 29 Apr 2024 10:49:03 GMT - Sun, 28 Jul 2024 10:49:02 GMT
File typeJavaScript source, ASCII text, with very long lines (36341), with no line terminators Hashfe59aea1c787d361c69c43c46a747767 2cc61a29d05db4814718cc60450876419afc5d24 9763b6045876ff0f6ddf7f20e19d631346a2f132e675ff1601896b3625fd9816
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /source/split.js HTTP/1.1
Host: js.cdntoswitchspirit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 30 Apr 2024 15:35:14 GMT
vary: Accept-Encoding
etag: W/"66310fb2-8df5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 199288
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Al%2BwF3%2FmgDRPbXadVENj3I3VIzzJXiIa4RxZA6l%2BOuoJfY16EoDVLbbros%2BDIpQnzn3s5SGSG%2FiGRhUg4Bp7%2B%2F3hVKFJvwOx0hdaNOpy%2B5HWnuz3xQR82%2FY7IKplFlcoGYb3xPPOxmNlqak%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e414a0c86d568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| k2liquidincense-us.com/favicon.ico | 104.21.59.126 | 302 Found | 4.1 kB |
URL GET HTTP/3k2liquidincense-us.com/favicon.ico IP104.21.59.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectk2liquidincense-us.com Fingerprint52:DF:FD:7E:B0:85:CB:F9:7A:54:FE:70:BA:5E:4B:FE:6E:DB:85:E4 ValidityWed, 27 Mar 2024 04:04:57 GMT - Tue, 25 Jun 2024 04:04:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: k2liquidincense-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Fri, 03 May 2024 23:37:44 GMT
content-type: text/html; charset=UTF-8
location: https://k2liquidincense-us.com/wp-includes/images/w-logo-blue-white-bg.png
link: <https://k2liquidincense-us.com/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
x-litespeed-cache-control: public,max-age=300
x-litespeed-tag: a37_HTTP.200,a37_HTTP.302,a37_default,a37_URL.b54ff2eddcb0060bcd786ce388d8d4d7,a37_
x-litespeed-cache: miss
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sa2%2B40zHAl%2FbqBBvvkw%2Fg%2FhWirHSwat6ClnzMmYtoNHBMSlKOcsOoaNJFBKfq8CglaQgONU5lGs%2Byi94XLHx5nQ99P3FGqdSrw3tWrFjWemIr5%2Fm5w2i5M0dVb2wFHev9A2VQtDg6Xme"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e414a50b4a0afa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| jquery.restartyourchoices.com/cdncollect?r1=k2liquidincense-us.com |  188.114.96.1 | 200 OK | 10 kB |
URL GET HTTP/2jquery.restartyourchoices.com/cdncollect?r1=k2liquidincense-us.com IP188.114.96.1:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerLet's Encrypt Subjectrestartyourchoices.com Fingerprint1E:64:C0:EA:CA:57:4F:66:CB:2A:33:CF:E5:2D:8D:F5:B1:21:CE:D6 ValidityThu, 02 May 2024 15:04:04 GMT - Wed, 31 Jul 2024 15:04:03 GMT
File typeJavaScript source, ASCII text, with very long lines (10370) Hasha670ec3dd6fa757de5d5aab7abddfe59 07efb08354a342ae821e52b60728a31945c95759 a9aa76d5655c965f1feceec22619fa26acb1c4832f76ea25a79201bbc2b2c2f0
GET /cdncollect?r1=k2liquidincense-us.com HTTP/1.1
Host: jquery.restartyourchoices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 23:37:44 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
expires: Fri, 03 May 2024 23:37:44 GMT
set-cookie: _subid=376l60jhn53nj; expires=Mon, 03 Jun 2024 23:37:44 GMT; path=/
a4fba=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjQxXCI6MTcxNDc3OTQ2NH0sXCJjYW1wYWlnbnNcIjp7XCIxM1wiOjE3MTQ3Nzk0NjR9LFwidGltZVwiOjE3MTQ3Nzk0NjR9In0.Z_Cna-epT33bYUZQRaQLVYnPDECdA45PDR18cspS4Xk; expires=Mon, 05 Sep 2078 23:15:28 GMT; path=/
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FkI6CBT2uk8O2tPnPz2D%2BcuWhl95JjznZEOSlwOvZjAs0e9bErrI8DZ2ZIrFYOvV3BW7CC4tHQm2Xw1QM8w0b99HX1zt23%2BhW9s2ZknfuR1WBVwTuAahY3%2BhnXWeZn%2BG8CzBJgzZFYKRk%2B7d%2FtKxyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e414a34970b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| k2liquidincense-us.com/wp-content/themes/blogi/js/navigation.js?ver=20120206 | 104.21.59.126 | 200 OK | 552 B |
URL GET HTTP/3k2liquidincense-us.com/wp-content/themes/blogi/js/navigation.js?ver=20120206 IP104.21.59.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectk2liquidincense-us.com Fingerprint52:DF:FD:7E:B0:85:CB:F9:7A:54:FE:70:BA:5E:4B:FE:6E:DB:85:E4 ValidityWed, 27 Mar 2024 04:04:57 GMT - Tue, 25 Jun 2024 04:04:56 GMT
File typeASCII text, with very long lines (617), with no line terminators Hashdff0332895b196ea16bbf511179be145 84fb4a910c88d434e509f4f938aad2a37c2c5174 1a959181c334d8a14faffa983e131f3383db09196b69c73ad22622f8b0bcfcae
GET /wp-content/themes/blogi/js/navigation.js?ver=20120206 HTTP/1.1
Host: k2liquidincense-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: text/javascript
etag: W/"228-65ed57b6-41e00fb;br"
last-modified: Sun, 10 Mar 2024 06:48:22 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7zfqZ2%2BpMakJ2SlgI9FtWb2jK2yYoDcmFdUQX%2BTP3SoOKrrJXTtfYbtjpJuT%2FK9t0Wft3buKbQAurzqAWofoxoIME1TjBTTzmN37yr7CU7CbkUHk%2FaXm3ynwCbClsLaaZulwsS6w5Suv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e4149c1fe60afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.startservicefounds.com/service/sort.js |  45.150.67.235 | 200 OK | 10 kB |
URL GET HTTP/2api.startservicefounds.com/service/sort.js IP45.150.67.235:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerLet's Encrypt Subjectapi.startservicefounds.com FingerprintA7:D1:75:3B:3E:DD:CD:0C:40:BE:48:98:D6:ED:B8:31:E6:CA:43:02 ValidityFri, 26 Apr 2024 22:33:59 GMT - Thu, 25 Jul 2024 22:33:58 GMT
File typeJavaScript source, ASCII text, with very long lines (10387), with no line terminators Hasha4b65fe97c9c98509fb6dcb771694411 1892a394fca0d377fbecd97eee53c7f609862813 d5b3b109f4bc1b1b1c2c326e4ad30780ce6bb1cd4e38c842fb9cc082fda085ec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /service/sort.js HTTP/1.1
Host: api.startservicefounds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 23:37:44 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Tue, 30 Apr 2024 15:10:04 GMT
etag: W/"663109cc-2893"
expires: Mon, 13 May 2024 23:37:44 GMT
cache-control: max-age=864000
access-control-allow-origin: *
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| k2liquidincense-us.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 104.21.59.126 | 200 OK | 89 kB |
URL GET HTTP/3k2liquidincense-us.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP104.21.59.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectk2liquidincense-us.com Fingerprint52:DF:FD:7E:B0:85:CB:F9:7A:54:FE:70:BA:5E:4B:FE:6E:DB:85:E4 ValidityWed, 27 Mar 2024 04:04:57 GMT - Tue, 25 Jun 2024 04:04:56 GMT
File typeJavaScript source, ASCII text, with very long lines (63763) Hash9363d78328d2b1f135830b0e2c2ff410 eeb17d670e00d1e2c2a6ec9ce66a3a4e3e4524f4 1305ac7720bde7efb2b2903ff1258cf9d3a087f7473862d17f0a331590a6fa22
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: k2liquidincense-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: text/javascript
etag: W/"15c95-662fe018-41e0ced;br"
last-modified: Mon, 29 Apr 2024 17:59:52 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tYh%2B20wg1wgzk2St3E6wgOkUyNfO9Xg8G0%2FPdAlUQVCHDli8vQZTEkX3VQqMld46UBdCVx4frEqwRcYh0MtsCFUsbuS7e0fzxwZf7gLBr1jxH2anDARCYUQT5Idft5nVc8CyM4BaNLS3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e4149bffd30afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| js.cdntoswitchspirit.com/source/split.js | 104.21.93.126 | 200 OK | 36 kB |
URL GET HTTP/3js.cdntoswitchspirit.com/source/split.js IP104.21.93.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerLet's Encrypt Subjectcdntoswitchspirit.com FingerprintDF:DB:EE:70:5A:39:BB:E7:A9:C6:4B:5C:24:04:56:6B:D0:D3:C0:AD ValidityMon, 29 Apr 2024 10:49:03 GMT - Sun, 28 Jul 2024 10:49:02 GMT
File typeJavaScript source, ASCII text, with very long lines (36341), with no line terminators Hashfe59aea1c787d361c69c43c46a747767 2cc61a29d05db4814718cc60450876419afc5d24 9763b6045876ff0f6ddf7f20e19d631346a2f132e675ff1601896b3625fd9816
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /source/split.js HTTP/1.1
Host: js.cdntoswitchspirit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 23:37:44 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 30 Apr 2024 15:35:14 GMT
vary: Accept-Encoding
etag: W/"66310fb2-8df5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 199289
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=51soccim7UBJ%2BEx9TCkLvBOnbcdA8jL4%2FQmd7FYMxiZksopRxJRrSLmIZXD%2F84is1e%2Fx2jtetfHbf188LUnSOEcigcujBxbG2tDo2xlJw95C5qcTobn%2FLU%2BbSPmy1urUFTgS8Fl8JaeOYCk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e414a488b5b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| k2liquidincense-us.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 | 104.21.59.126 | 200 OK | 113 kB |
URL GET HTTP/3k2liquidincense-us.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 IP104.21.59.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectk2liquidincense-us.com Fingerprint52:DF:FD:7E:B0:85:CB:F9:7A:54:FE:70:BA:5E:4B:FE:6E:DB:85:E4 ValidityWed, 27 Mar 2024 04:04:57 GMT - Tue, 25 Jun 2024 04:04:56 GMT
Size113 kB (113381 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1
Host: k2liquidincense-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 10 May 2024 23:37:43 GMT
etag: W/"1bae5-660cad02-41e0b01;br"
last-modified: Wed, 03 Apr 2024 01:12:34 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FhpjJ9FSAG24Iw8e%2BUjVcttT7R2VtkOurIPI5fCLIUgjD6l5u%2FRXh%2FL3XMneN9k6W2SSaUWGoBruqXJq1oHeDrbb4VYgyX2c7%2FfkhJ6mrgOsaYrU51JkgQ2m3hwHtFZBiuGO8rJlLsnW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e4149befcb0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| k2liquidincense-us.com/wp-content/plugins/wp-show-posts/css/wp-show-posts-min.css?ver=1.1.6 | 104.21.59.126 | 200 OK | 3.5 kB |
URL GET HTTP/3k2liquidincense-us.com/wp-content/plugins/wp-show-posts/css/wp-show-posts-min.css?ver=1.1.6 IP104.21.59.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectk2liquidincense-us.com Fingerprint52:DF:FD:7E:B0:85:CB:F9:7A:54:FE:70:BA:5E:4B:FE:6E:DB:85:E4 ValidityWed, 27 Mar 2024 04:04:57 GMT - Tue, 25 Jun 2024 04:04:56 GMT
File typeASCII text, with very long lines (3488), with no line terminators Hash5e25736dc7a1c0560c9a2bee4d910375 e27e2c1b22b5f5f2923188642a943806e7424cfd 93aade5d8e86b23584659402a45076b8cd63f0cfea39e75306400e6a88f4be8f
GET /wp-content/plugins/wp-show-posts/css/wp-show-posts-min.css?ver=1.1.6 HTTP/1.1
Host: k2liquidincense-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 10 May 2024 23:37:43 GMT
etag: W/"d9d-661f2293-41c0fd9;br"
last-modified: Wed, 17 Apr 2024 01:14:59 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ARxbSwFiM%2FvIY%2BoJhtwe4EnDTjERMmiAEZgoBSDLH4msmR0QXHC3i4jQTMTcaA1e9yMJnRNMPo%2FumeehGl1Y4ezKKAlsMN7kvC%2Faftq3rwvQ6GUe%2BkiQzSwCigbFYTXhix9JiLmnH20g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e4149befcc0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| k2liquidincense-us.com/wp-content/themes/blogi/assets/font-awesome/css/font-awesome.min.css?ver=6.5.2 | 104.21.59.126 | 200 OK | 29 kB |
URL GET HTTP/3k2liquidincense-us.com/wp-content/themes/blogi/assets/font-awesome/css/font-awesome.min.css?ver=6.5.2 IP104.21.59.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectk2liquidincense-us.com Fingerprint52:DF:FD:7E:B0:85:CB:F9:7A:54:FE:70:BA:5E:4B:FE:6E:DB:85:E4 ValidityWed, 27 Mar 2024 04:04:57 GMT - Tue, 25 Jun 2024 04:04:56 GMT
File typeASCII text, with very long lines (28900) Hashbb53ad7bffecc0014d64553e96501dce 7cd5a3384333f95c3d37d9488ad82cd6c4b03761 7bc15c522a05ce0e56b8cb3fff83bc6e770130afdd840d469869db69663d78fe
GET /wp-content/themes/blogi/assets/font-awesome/css/font-awesome.min.css?ver=6.5.2 HTTP/1.1
Host: k2liquidincense-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 10 May 2024 23:37:43 GMT
etag: W/"7186-65ed57b6-41e00ee;br"
last-modified: Sun, 10 Mar 2024 06:48:22 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eika3jcWrF6yjuE865A1%2Bgc599XMIpVUgH0dSZDBmX6Sb%2BEAkqSu78uiBthjDAk58Fx413BfT5JSVqWxDg%2BZuMEVCr3AvrD7c8BpvnENZ91KCFbzQGQCayku2NtUM8wJMhfGObWrOKWZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e4149bffd10afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| k2liquidincense-us.com/wp-content/themes/blogi/style.css?ver=6.5.2 | 104.21.59.126 | 200 OK | 21 kB |
URL GET HTTP/3k2liquidincense-us.com/wp-content/themes/blogi/style.css?ver=6.5.2 IP104.21.59.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectk2liquidincense-us.com Fingerprint52:DF:FD:7E:B0:85:CB:F9:7A:54:FE:70:BA:5E:4B:FE:6E:DB:85:E4 ValidityWed, 27 Mar 2024 04:04:57 GMT - Tue, 25 Jun 2024 04:04:56 GMT
Hash1c450a4df0bbc082bb5c8cc8552f0f7d a01da6a4ef5d48dbbf1c52c3fc202468d2eed9ef add1d5c5639955a6b209bceb7742d8385a4c6829d6136f5ba5cee30015c07e7f
GET /wp-content/themes/blogi/style.css?ver=6.5.2 HTTP/1.1
Host: k2liquidincense-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 10 May 2024 23:37:43 GMT
etag: W/"5096-65ed57b6-41e00e3;br"
last-modified: Sun, 10 Mar 2024 06:48:22 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4m3miowRzyLuXBZGYEYhSNk18c2Y%2FKgzEHfm4No48ARGBDQKWTbG1U6QoGcmGEpSp1BhvZ%2ByOmXZg8oHHmY9aPnJYPZFKpEe3D1qFX6w54RbGNIBKaSiSgyle77m9QUHsTUGOMOnAq5H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e4149bffd20afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| k2liquidincense-us.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 104.21.59.126 | 200 OK | 14 kB |
URL GET HTTP/3k2liquidincense-us.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP104.21.59.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectk2liquidincense-us.com Fingerprint52:DF:FD:7E:B0:85:CB:F9:7A:54:FE:70:BA:5E:4B:FE:6E:DB:85:E4 ValidityWed, 27 Mar 2024 04:04:57 GMT - Tue, 25 Jun 2024 04:04:56 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: k2liquidincense-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: text/javascript
etag: W/"3509-65ed2bd3-41e0ce5;br"
last-modified: Sun, 10 Mar 2024 03:41:07 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wRTTch5wmVXOPdUZsUirRmPrBZAdcBgomsqbkNZdPf689fuTzJP1NeBK8Y9R1K45tlojvbt%2FL8JrjmQIj1eTZwiBPSdeM8%2Be7r97khDckTU1%2Fo5Uv4qlmSfx58Qv0Sl%2BJ%2BOS7sNz2mHG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e4149bffd60afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| k2liquidincense-us.com/wp-content/themes/blogi/assets/bootstrap/css/bootstrap.min.css?ver=6.5.2 | 104.21.59.126 | 200 OK | 121 kB |
URL GET HTTP/3k2liquidincense-us.com/wp-content/themes/blogi/assets/bootstrap/css/bootstrap.min.css?ver=6.5.2 IP104.21.59.126:443
Requested byhttps://k2liquidincense-us.com/ CertificateIssuerGoogle Trust Services LLC Subjectk2liquidincense-us.com Fingerprint52:DF:FD:7E:B0:85:CB:F9:7A:54:FE:70:BA:5E:4B:FE:6E:DB:85:E4 ValidityWed, 27 Mar 2024 04:04:57 GMT - Tue, 25 Jun 2024 04:04:56 GMT
File typeASCII text, with very long lines (65371) Size121 kB (121200 bytes) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /wp-content/themes/blogi/assets/bootstrap/css/bootstrap.min.css?ver=6.5.2 HTTP/1.1
Host: k2liquidincense-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k2liquidincense-us.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 03 May 2024 23:37:43 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 10 May 2024 23:37:43 GMT
etag: W/"1d970-65ed57b6-41e00e5;br"
last-modified: Sun, 10 Mar 2024 06:48:22 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sy82Dfr67v4KJCmIeRDHGx%2FVinBvErIpg7OW55ivgwslcac5C95Ze7xi%2B6ZYjhJo2DDXFtaJSA71NrWw37ogWFlflA8sSuvzDE%2FQ2%2BaoyP1phmYMk9ccklZrmnSg6snwrTJm3Bs8DlX3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e4149befcd0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|