firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: a_6Ef9-A51qANEK3s7x-oBOKE1PJvwAaT0eP4NlRRWSfIHSv-pWgvA==
Age: 14159
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eabb7d9ffae717f7305d63c057755470
3b7f0baccfdbb8d9ffefa4a2215d4d6094be454a
ab48f17e54075e1ecf034278e82bcacd2e3689773186cc84fba9b79aac907294
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AB48F17E54075E1ECF034278E82BCACD2E3689773186CC84FBA9B79AAC907294"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2708
Expires: Wed, 05 Oct 2022 20:28:25 GMT
Date: Wed, 05 Oct 2022 19:43:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4ab7d8709d334de0e46dcb86aabfbff1
f221138a8ad9d0bfa3c054370dcdb363a67dc310
b91d37f606eaf448b9c7dfc05566a11de004ce44503409e1a776288ee2622805
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B91D37F606EAF448B9C7DFC05566A11DE004CE44503409E1A776288EE2622805"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4845
Expires: Wed, 05 Oct 2022 21:04:02 GMT
Date: Wed, 05 Oct 2022 19:43:17 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: g3ISbPREyA9t3VmRaY/7Bf6if9EHm1hew+K2eZ3UPoxVop9t9tqJBVkJXlE493Ffj2uI74+nKKY=
x-amz-request-id: QXB73TPQ0K43EFYR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 05 Oct 2022 19:30:27 GMT
age: 770
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
cyberera.com.ng/au/eumapoaltiutvq
301 Moved Permanently 250 B URL HTTP/2 cyberera.com.ng/au/eumapoaltiutvq
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 79221eae36c6a3bc92ef750745f6e19e
a53b46cb8500c2075d3a2b61cde8966ed711161e
e44d60f83567ae3cfe60d81eb72ac0d1c43931a6c23c311e1b33cd2bd21110fc
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /au/eumapoaltiutvq HTTP/1.1
Host: cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
location: https://cyberera.com.ng/au/eumapoaltiutvq/
cache-control: max-age=600
expires: Wed, 05 Oct 2022 19:53:17 GMT
content-length: 250
content-type: text/html; charset=iso-8859-1
date: Wed, 05 Oct 2022 19:43:17 GMT
server: Apache
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 05 Oct 2022 19:43:17 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Wed, 05 Oct 2022 19:10:22 GMT
Expires: Wed, 05 Oct 2022 19:38:44 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UckAKpsHhuGTO1ui4uYkuI30u4ew48OIpUyDzAetOuV40tMRdwUaHg==
Age: 1976
ocsp.digicert.com/
200 OK 471 B IP
Hash 1561c6be7c89d1357a80d12de47b6e74
9a705277922ecca583c867af58b3efce099f83bd
e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4300
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 19:43:18 GMT
Last-Modified: Wed, 05 Oct 2022 18:31:38 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: tOhjcHvK5GTX8hPx8H6Qkw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /ZNm4po7xGBTP5TpEQgW4WMS2F0=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3683
Expires: Wed, 05 Oct 2022 20:44:43 GMT
Date: Wed, 05 Oct 2022 19:43:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3683
Expires: Wed, 05 Oct 2022 20:44:43 GMT
Date: Wed, 05 Oct 2022 19:43:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3683
Expires: Wed, 05 Oct 2022 20:44:43 GMT
Date: Wed, 05 Oct 2022 19:43:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 229c99cfb655a8c9f1a22de69fdff73c
6b5db8fbfb56f083d54b13e7660d0e4bc866aa00
f4099e9153c3dc481add95b0f24dbb8f6d65cc74ad5631d9cb6c6f2a0351843d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7021
x-amzn-requestid: 2e30bdac-360e-4d0a-8bb7-c3144e074abe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8ucHb1oAMFjYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7f5-18ba6bc50cb32b1e14c882bd;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:39:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Sd2_YDHr3j7ym7wfFyQh9kg8FP-Et2nJUOo1v_TNbI3PvpzEY5KJ2Q==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 22:07:19 GMT
age: 77761
etag: "6b5db8fbfb56f083d54b13e7660d0e4bc866aa00"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1de7c17a0ba9295135e7f8b490b6a8d3
70e8d1589f3daf71378965dd197934e220fb6aa4
ee559ce3166479e2b930be7d18525f5c2d164aed8ca005302ddaf3bfe37eec24
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8926
x-amzn-requestid: 27fc8976-af8d-40a3-b701-0642fa135ec4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8s1GSbIAMFTiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7eb-4d4c7837576e0fdb5828fe3b;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YzVofPSJC-YVU1Q1V9AnjNeQTa1BQEh6ZiH2HjSeeX5RygysFP7oAA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 21:42:34 GMT
age: 79246
etag: "70e8d1589f3daf71378965dd197934e220fb6aa4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg
200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d7d7df8d4c440f9db445c3d99e818d6
612b6dbd4ba895c167964ff7e6d9263013b52b0a
bf527a814c78f9e010cce4ba593c9146d54a2137d1f147f7a6250fbad81956ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3585
x-amzn-requestid: ccb6f0c8-4d9b-48b8-aaf6-16781dc4c86b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaHFlEcFoAMFS3g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a5223-5c9276c873efee993ba54667;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 03:08:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: T8m1q2L45TWDVRBa-R2W70yq9BauBK3G4IX54AGIxdRhG736T974kg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 04:05:29 GMT
age: 56271
etag: "612b6dbd4ba895c167964ff7e6d9263013b52b0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3257b782efae9b64e6e18a547866ec50
4daf0c001e86af8477fb097e8ca932edb8e5f981
899f9692e86405aa288d88dd285a6fe26bedab1a2ca4693212476063890b01a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5832
x-amzn-requestid: c4427edd-3d71-47d0-a2d3-b3bfed089535
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8s1FuUoAMFhBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7eb-46ddff150da4141d23fc0d8a;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: WWClzLGprno--c75q63i1TFi8oBEdAYW-J4lCk9V8IELQXe6q0A05A==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 21:42:34 GMT
age: 79246
etag: "4daf0c001e86af8477fb097e8ca932edb8e5f981"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 100559d746bedd7c3802661c875c35ee
5261a6c2ee6d6cc87e91ee82e32d8be234db393e
ff06f31267ddcc9a0d84ddc68932872bfed29d072783c3a1dd3790d41c280aec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8816
x-amzn-requestid: b9f3ec8a-f478-4405-b275-e21f2d7d89d4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZKK7gFPJIAMF-7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333f1e3-250348e6140f3c74762263ea;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 07:04:03 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: F1ZWwxLKhRC6oSh6gnUxEm5AnYcY-mezJw9mNJ8GmNWnATAKx1JxSg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 22:42:26 GMT
age: 75654
etag: "5261a6c2ee6d6cc87e91ee82e32d8be234db393e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4fc2ddd86450d64d3fb659ab4e78be58
bbe71936b78a8c34d03ab87948dc840b35c6948f
84a760397a5912bd05f61bc8a953c13a88a677e2d17fbbf74bdf7d7ff4d3942f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10158
x-amzn-requestid: def1fc7e-8008-466f-9271-20fa1ab0fa5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaqZCH7doAMFcPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a8aa0-7fd2fb1249366f2277d719d6;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 07:09:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: szhtD9f4RuQaDKXe7LElSR0yOKo9cYa1i2YMeG3eSpBXP8ePcdzQig==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 07:29:32 GMT
age: 44028
etag: "bbe71936b78a8c34d03ab87948dc840b35c6948f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cyberera.com.ng/au/eumapoaltiutvq/
301 Moved Permanently 0 B URL HTTP/2 cyberera.com.ng/au/eumapoaltiutvq/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /au/eumapoaltiutvq/ HTTP/1.1
Host: cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 301 Moved Permanently
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: https://www.cyberera.com.ng/au/eumapoaltiutvq/
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 19:43:18 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/au/eumapoaltiutvq/
404 Not Found 8.6 kB URL HTTP/2 www.cyberera.com.ng/au/eumapoaltiutvq/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32228)
Hash fbe15e3ac1c75764c0e19d6e538b0db5
9d8124389a9ddf34b85917e35714bad5f408c25b
3e00e6e93b6ca7e962346a9785e6f84f59bcaa5d09bf746f1f4371710280a0e5
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /au/eumapoaltiutvq/ HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 8558
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 19:43:20 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 19:43:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.cyberera.com.ng/bingos/assets/style.css
200 OK 638 B URL HTTP/2 www.cyberera.com.ng/bingos/assets/style.css
IP
File type ASCII text, with CRLF line terminators
Hash 10e61f5e7f27b71e00143ed48c60bba7
27ef2496dcaa9f1332b39dc87103ee5f6365eddb
5f70805da3b662c517cb432a68b554795c124e8055c8a14ba7f09318351c2887
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /bingos/assets/style.css HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 01 Oct 2022 17:45:23 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 638
content-type: text/css
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/external/bootstrap.css
200 OK 4.0 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/external/bootstrap.css
IP
File type ASCII text, with very long lines (540), with CRLF line terminators
Hash f049488d534c59f8190a7b874387687d
de94ba0237961e4ee52d502bb7e32915970d4067
eddab397682aa86e12e619dbf64b5c53bc5d94f9ffc78fe4e0860167d37be776
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/external/bootstrap.css HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4025
content-type: text/css
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/components/css/dist/block-library/style.min.css
200 OK 12 kB URL HTTP/2 www.cyberera.com.ng/components/css/dist/block-library/style.min.css
IP
File type ASCII text, with very long lines (43771)
Hash e5548800176e913a9084f47a3e1e04f6
eff4604acc5c26ae82a19188de2f98bf5b79d80c
a2569c768eaca09f2483b971fcebb97badd57c9a16b5ae3e16b8cdcd8c688b07
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /components/css/dist/block-library/style.min.css HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 04 Jul 2022 16:40:38 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 11681
content-type: text/css
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 19:43:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.cyberera.com.ng/visuals-temp/assets/external/miscellaneous.css
200 OK 3.6 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/external/miscellaneous.css
IP
File type ASCII text, with CRLF line terminators
Hash c5d7e3eeb82fa3c6c45410bf461efcc9
dd0110c00c51257fe230a8c1e4fad3841b3e8c95
36e72228859861cc49a5b6ba1160d04f633a1baf80c93701ce7f1bb983f27930
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/external/miscellaneous.css HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3572
content-type: text/css
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/visuals
301 Moved Permanently 257 B URL HTTP/2 www.cyberera.com.ng/visuals-temp/visuals
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 08d2bf44659c3fe798c6df399bfc2c12
d474706afde68649ab63767cb3319428ea950750
e06473d41120e2c30656e0708c39c5264c15f4b6fcc2e22b54f1e0901e381d98
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/visuals HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
location: https://www.cyberera.com.ng/visuals-temp/visuals/
cache-control: max-age=600
expires: Wed, 05 Oct 2022 19:53:22 GMT
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/addons/wps-visitor-counter/styles/css/default.css
200 OK 1.1 kB URL HTTP/2 www.cyberera.com.ng/addons/wps-visitor-counter/styles/css/default.css
IP
Hash 564cd6357c32788057d306e77dcec89b
b26cd64e7f87971786cbdd0c38f142b2dbc27f72
05a04d13bad67cbf78b4f46d494b8423f2f71c538be968b8fc0632918be6b773
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /addons/wps-visitor-counter/styles/css/default.css HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 01 Oct 2022 18:05:49 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1070
content-type: text/css
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/css/theme-responsive.css
200 OK 8.3 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/css/theme-responsive.css
IP
File type ASCII text, with CRLF line terminators
Hash 4048100e20308fbc9ccab9eafc5c6d3b
906f6948e6354a48844afc92fa777b177b9dd053
6f306ea25b25ff5ed12a9665a174919c3860bb2741bba8629c29ad72ec6a33ed
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/css/theme-responsive.css HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 8282
content-type: text/css
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/css/theme-style.css
200 OK 48 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/css/theme-style.css
IP
File type ASCII text, with CRLF line terminators
Hash 405de654d2eddf540877efdca3bb6be8
917df5f2e5db86509be9ac790b2c069aedac904e
e7bbc744073e8dee0b378a1c5cb8d0c6c1ecf823939eb227b046f3fa8cfe980b
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/css/theme-style.css HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 48076
content-type: text/css
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/components/js/jquery/jquery.min.js
200 OK 31 kB URL HTTP/2 www.cyberera.com.ng/components/js/jquery/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 9640915738503451aa21181699feab5b
c053eaf36ef0da96619706b3abda326305063bd6
f8834e669ad1f4039442c26aaa373ec39c35a233b9786d374fc3f670f16b0adc
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /components/js/jquery/jquery.min.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 10 Mar 2021 19:37:24 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 30908
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/components/js/jquery/jquery-migrate.min.js
200 OK 4.2 kB URL HTTP/2 www.cyberera.com.ng/components/js/jquery/jquery-migrate.min.js
IP
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /components/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Nov 2020 13:36:06 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4169
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/external/lib-tipsy.js
200 OK 2.6 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/external/lib-tipsy.js
IP
File type ASCII text, with very long lines (4220), with CRLF line terminators
Hash a0ec9e08df3fe3638d9921284ddff190
3eae9606f432175276c6f63c32f895edee706d78
87a111e49a1218d90c5d3158b044755692573016c4e913430bb690a6a500cdd3
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/external/lib-tipsy.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2591
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/bingos/assets/script.js
200 OK 183 B URL HTTP/2 www.cyberera.com.ng/bingos/assets/script.js
IP
File type ASCII text, with CRLF line terminators
Hash 58eb028210158080a4345dcfe8cac789
47ef3bb3448cfd6e42610f988f1533b4114bcfee
d7e8c8d9bf1799273a1c67fbd0e50878bf2aa2acde8d6cf51ab3f0e7c5a0bc7c
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /bingos/assets/script.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 01 Oct 2022 17:45:23 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 183
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/addons/wps-visitor-counter/styles/js/custom.js
200 OK 197 B URL HTTP/2 www.cyberera.com.ng/addons/wps-visitor-counter/styles/js/custom.js
IP
Hash e6f0ce994d7e78e5bf93866c471d5b86
c75bd131f6ef31f6a05e6bbd051454c57fa2dfc8
2c93906f08213bf320d2028230fa54d17e450c40d6a5d133698adf3b30439a75
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /addons/wps-visitor-counter/styles/js/custom.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 01 Oct 2022 18:05:49 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 197
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/external/lib-fitvids.js
200 OK 1.9 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/external/lib-fitvids.js
IP
File type HTML document, ASCII text, with very long lines (1783), with CRLF line terminators
Hash 08f9c69142b7d6c01d079114fd6af896
14d4878480d4a722dbd40e35e267f4afb795a2f1
2e83ab1bca3fa4ad44921b667f31917ffd5b5a77a52d034429e79493d5f96163
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/external/lib-fitvids.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1865
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/external/lib-totop.js
200 OK 2.4 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/external/lib-totop.js
IP
File type HTML document, ASCII text, with very long lines (3186), with CRLF line terminators
Hash da095a55abae21c83c6911835bde780c
2fc7a4cc291f585956b31c07f3cdbf437e6bfd13
35d6080947b28ce36163695dc56b2128c896a759555a492a48022a8c37261f08
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/external/lib-totop.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2361
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/components/js/imagesloaded.min.js
200 OK 1.8 kB URL HTTP/2 www.cyberera.com.ng/components/js/imagesloaded.min.js
IP
File type ASCII text, with very long lines (5477)
Hash 951ae46ca55ec7b0e401e2074bdf8b54
64bbbdc28a351b26cab9c230e134ca8eb4d4f83e
fd5d4c623e9d68551114b2a1303584b6792e592e864d4416145904fe8b9edd91
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /components/js/imagesloaded.min.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 13 Jun 2020 23:23:28 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1834
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/external/lib-rubysticky.js
200 OK 2.3 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/external/lib-rubysticky.js
IP
File type ASCII text, with very long lines (5868), with CRLF line terminators
Hash b8856108b81ce1f962c1485db91dd549
e863929c7bd47a95fd65a6d658471426036a7fd3
ecfc7d8b23aa0f9cb10e7526fb975b19100de5eee920ab34d4f4519495c37452
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/external/lib-rubysticky.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2257
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/external/lib-sticky.js
200 OK 2.7 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/external/lib-sticky.js
IP
File type ASCII text, with very long lines (6059), with CRLF line terminators
Hash 5a28a69396b38a83626465cefc7e18d6
da1add2a7ea5e8b74e91922e2a4b717f17b90ec1
6c96ad0c2653d2303993f51effa18018837697948fae551c5b46ad7938b6155e
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/external/lib-sticky.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2707
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/external/lib-backstretch.js
200 OK 2.7 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/external/lib-backstretch.js
IP
File type ASCII text, with very long lines (4095), with CRLF line terminators
Hash 87ca0aa205016d1c44a4dcd5c5617892
108be06d931f8d09ffd25a95ea2e39ebbdd423c1
8ba5198433671c392971bba781dbee8e744c8d19c928d1899f7e485b1436abd3
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/external/lib-backstretch.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2722
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/external/lib-waypoints.js
200 OK 4.0 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/external/lib-waypoints.js
IP
File type Unicode text, UTF-8 text, with very long lines (8623), with CRLF line terminators
Hash fe1dd42d162b1d7787b2f252202b77aa
111d4afd702366762a39ce0045b443580037e769
ad023e944ed67c340bf4c1fbd038cf35dfb8dbd9dd60e60f7413d12adf0c8c23
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/external/lib-waypoints.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3950
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/external/lib-justified.js
200 OK 5.6 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/external/lib-justified.js
IP
File type ASCII text, with very long lines (18710), with CRLF line terminators
Hash 66fd712e9ea29295ddbb845c8d4a7f2c
e9a6f1e999f41005c94b06b2c9ff3f209177abb2
eece491f83d40b44394239bd7cfd94863690839a2e4139311b27f8056f181976
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/external/lib-justified.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 5606
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/external/lib-modernizr.js
200 OK 7.1 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/external/lib-modernizr.js
IP
File type HTML document, ASCII text, with very long lines (14591), with CRLF line terminators
Hash 61fa68546d486f42bf08923d01d18187
a3c6750ec6a911abafc952f4b89a0b5a879bec81
b914ed885ff6b000e6c9ed1754ea951671c2d4d58f9f2739de36f2b6f57bc6a9
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/external/lib-modernizr.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7094
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/external/lib-magnificpopup.js
200 OK 8.3 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/external/lib-magnificpopup.js
IP
File type ASCII text, with very long lines (21881), with CRLF line terminators
Hash 7ea7e51a1d5aa241dc378b593c6c80da
cf4da76a44586d2e5d6574b0025f05a5a8543fc8
80c8680bb96b7b1f9a19824695950245e0669ea2514126436a9c7760fede2ad8
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/external/lib-magnificpopup.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 8274
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/external/lib-bootstrap.js
200 OK 8.5 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/external/lib-bootstrap.js
IP
File type ASCII text, with very long lines (30297), with CRLF line terminators
Hash 8d4c90e1dd2f1ff2ce8384b7e599269a
49f0b478ca212ea68571784ec1a07c378c3df21f
f3b7a876c94709c5c260b1225649b2f458865c241a542fbfb4781108dc3275fb
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/external/lib-bootstrap.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 8519
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/external/lib-slick.js
200 OK 11 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/external/lib-slick.js
IP
File type ASCII text, with very long lines (32313), with CRLF line terminators
Hash aa6b083c81667dc6e1ea2d57bd65d887
c5b53d42b6e86005a848147dec08be15d6fb9a4a
bcbb2ee9b041dda2532910d8f4c7413147cf972c5dccda8c7f4fc8a83cae60d8
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/external/lib-slick.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 10631
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/js/theme-script.js
200 OK 14 kB URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/js/theme-script.js
IP
File type ASCII text, with CRLF line terminators
Hash 54639b3e08577cf9ee38f433de6ffa8c
d9495efb7535af2a994f1d5b8cd34b1a6482f475
88626f1256b34a447a9a6f0459b1f7cb06f86c76b053090bcea960887b60f000
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/js/theme-script.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 14414
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/visuals/
200 OK 303 B URL HTTP/2 www.cyberera.com.ng/visuals-temp/visuals/
IP
Hash 299e3c2f42fdd0214db2a7be7cf2c1d9
6c6bc5619603c9b8d19f75cad3cf2821fa9631f1
7884fb3b8da3450cecc5cc53128dd55b4657716fa8e70913664806a225991461
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/visuals/ HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 303
content-type: text/css
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/media_content/2022/10/cyberera-logo.png
200 OK 268 kB URL HTTP/2 www.cyberera.com.ng/media_content/2022/10/cyberera-logo.png
IP
File type PNG image data, 1800 x 504, 8-bit/color RGBA, non-interlaced\012- data
Size 268 kB (267709 bytes)
Hash 4e8881494f820bdf7106e4c386d46e1d
1224abd3dceb18753c22937752f53996198798f8
20dc7b5eed4c54c38fe2cead6f3bb64d1b225b86a0be06fbf714881428885ef2
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /media_content/2022/10/cyberera-logo.png HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 04 Oct 2022 18:29:57 GMT
accept-ranges: bytes
content-length: 267709
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
content-type: image/png
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/emt_build/assets/lib/font-awesome/css/font-awesome.min.css
404 Not Found 8.6 kB URL HTTP/2 www.cyberera.com.ng/emt_build/assets/lib/font-awesome/css/font-awesome.min.css
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32228)
Hash fbe15e3ac1c75764c0e19d6e538b0db5
9d8124389a9ddf34b85917e35714bad5f408c25b
3e00e6e93b6ca7e962346a9785e6f84f59bcaa5d09bf746f1f4371710280a0e5
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /emt_build/assets/lib/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 8558
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 19:43:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cyberera.com.ng
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Oct 2022 17:10:21 GMT
expires: Wed, 04 Oct 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 95582
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 19:43:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 19:43:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23236, version 1.0\012- data
Hash 716309aab2bca045f9627f63ad79d0bf
38804233a29aaf975d557fe14e762c627bef76e0
115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429
GET /s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cyberera.com.ng
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Oct 2022 17:17:26 GMT
expires: Wed, 04 Oct 2023 17:17:26 GMT
cache-control: public, max-age=31536000
age: 95157
last-modified: Tue, 26 Apr 2022 16:04:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cabin/v26/u-4g0qWljRw-Pd815fNqc8T_wAFcX-c37OnuHXg.woff2
200 OK 28 kB URL HTTP/2 fonts.gstatic.com/s/cabin/v26/u-4g0qWljRw-Pd815fNqc8T_wAFcX-c37OnuHXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 27584, version 1.0\012- data
Hash 4b1ccde40f50e18ba65d8dd6c37b9568
c3207ebc1f717a9312ffd980ff2167ca2e48019f
8fbad22272f358d3e1a9e09a50761bd38b44cd558e3316d562e33804f9536a54
GET /s/cabin/v26/u-4g0qWljRw-Pd815fNqc8T_wAFcX-c37OnuHXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cyberera.com.ng
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27584
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 01:40:18 GMT
expires: Sun, 01 Oct 2023 01:40:18 GMT
cache-control: public, max-age=31536000
age: 410585
last-modified: Fri, 24 Jun 2022 18:42:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cyberera.com.ng
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Oct 2022 17:10:21 GMT
expires: Wed, 04 Oct 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 95582
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cabin/v26/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/cabin/v26/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26100, version 1.0\012- data
Hash 312bcfa92b0b0a09c3f404b2c662a0b6
5398ff9ee3c10bffc54e3a9f7e5e7506a822b38a
979caf94add5b00ec59d8abde43d200523745c2f4b105c2906f4d9dda4afaeec
GET /s/cabin/v26/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cyberera.com.ng
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26100
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 18:23:00 GMT
expires: Thu, 05 Oct 2023 18:23:00 GMT
cache-control: public, max-age=31536000
age: 4823
last-modified: Fri, 24 Jun 2022 18:41:34 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 19:43:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.cyberera.com.ng/media_content/2022/10/cropped-cyberera-logo-192x192.png
200 OK 19 kB URL HTTP/2 www.cyberera.com.ng/media_content/2022/10/cropped-cyberera-logo-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 69e5ffc45f7ed003fafde87fa2245ca4
b8962baca953bca9ae3c3b81285f78cf21d0109f
2ac7b49d912357f96a9cc44ebd066873c6633d9bc6f5423e72b3cd759f133bb2
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /media_content/2022/10/cropped-cyberera-logo-192x192.png HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 05 Oct 2022 06:35:07 GMT
accept-ranges: bytes
content-length: 18895
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:23 GMT
content-type: image/png
date: Wed, 05 Oct 2022 19:43:23 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/media_content/2022/10/cropped-cyberera-logo-32x32.png
200 OK 1.5 kB URL HTTP/2 www.cyberera.com.ng/media_content/2022/10/cropped-cyberera-logo-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash fb4a910c7a467c460946717df7acb9bb
05583640883bbe221fc3ca302f1449b607ada728
def6b5149064bc6ac5f07538385355556ceb1259321f150ef872df51517ca598
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /media_content/2022/10/cropped-cyberera-logo-32x32.png HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 05 Oct 2022 06:35:07 GMT
accept-ranges: bytes
content-length: 1545
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:23 GMT
content-type: image/png
date: Wed, 05 Oct 2022 19:43:23 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/desk/admin-ajax.php
200 OK 0 B URL HTTP/2 www.cyberera.com.ng/desk/admin-ajax.php
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
POST /desk/admin-ajax.php HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 44
Origin: https://www.cyberera.com.ng
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.cyberera.com.ng
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 19:43:23 GMT
server: Apache
X-Firefox-Spdy: h2
www.cyberera.com.ng/media_content/2022/05/ncc-banner.jpeg
200 OK 0 B URL HTTP/2 www.cyberera.com.ng/media_content/2022/05/ncc-banner.jpeg
IP
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /media_content/2022/05/ncc-banner.jpeg HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 04 May 2022 13:11:48 GMT
accept-ranges: bytes
content-length: 100519
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
content-type: image/jpeg
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato%3A400%2C700%2C300%7CPoppins%3A700%2C500%2C400%7CCabin%3A400%2C500%2C600%2C700%2C400italic%2C500italic%2C600italic%2C700italic&font-display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato%3A400%2C700%2C300%7CPoppins%3A700%2C500%2C400%7CCabin%3A400%2C500%2C600%2C700%2C400italic%2C500italic%2C600italic%2C700italic&font-display=swap
IP
GET /css?family=Lato%3A400%2C700%2C300%7CPoppins%3A700%2C500%2C400%7CCabin%3A400%2C500%2C600%2C700%2C400italic%2C500italic%2C600italic%2C700italic&font-display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 05 Oct 2022 19:43:22 GMT
date: Wed, 05 Oct 2022 19:43:22 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.cyberera.com.ng/visuals-temp/assets/external/lib-smoothscroll.js
200 OK 0 B URL HTTP/2 www.cyberera.com.ng/visuals-temp/assets/external/lib-smoothscroll.js
IP
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /visuals-temp/assets/external/lib-smoothscroll.js HTTP/1.1
Host: www.cyberera.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cyberera.com.ng/au/eumapoaltiutvq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Dec 2020 14:33:16 GMT
accept-ranges: bytes
cache-control: max-age=3600, public
expires: Fri, 04 Nov 2022 19:43:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3055
content-type: application/javascript
date: Wed, 05 Oct 2022 19:43:22 GMT
server: Apache
X-Firefox-Spdy: h2
67.225.140.8
93.184.220.29
23.36.76.226