ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 7d0fbff46cbcbb68a0e0d3fa7ff1d42d
2f9acdb5cdf78919917fedc837fc774c8d732aa8
88c96d675ca633a21367f3f518e2d33f940fed477611d67372273bc5357c9879
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 25 Oct 2023 04:58:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 25ee40154711e09e72514fb1d97998db
9d9c7de2b4e049ca9ee938c1bc2259b915d0ca7b
31fdfba6b02cf76a87b31d19645609d200108e0e967495cb583a40fa963614f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 25 Oct 2023 04:58:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
216.58.207.234200 OK 31 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP 216.58.207.234:443
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint28:23:2B:8B:2D:09:6C:BB:06:7A:35:80:95:BB:F8:03:41:C8:99:2C
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 21 Oct 2023 21:21:59 GMT
expires: Sun, 20 Oct 2024 21:21:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 286571
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-205366137-2
142.250.74.168200 OK 69 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-205366137-2
IP 142.250.74.168:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint81:B9:A4:E4:E4:84:05:A7:F6:52:4F:E2:74:27:36:05:0D:74:15:89
ValidityThu, 28 Sep 2023 05:26:20 GMT - Thu, 21 Dec 2023 05:26:19 GMT
File type ASCII text, with very long lines (4179)
Hash cce46731bd5810f61609d7bed37e27c3
ee709d38b0a795625aa87a853237b0c0ff7e4aaa
e93e812aff2c69c0f0d1d48584fd9e48d2b30d4ca4cb520ca3486bceaf225af3
GET /gtag/js?id=UA-205366137-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 25 Oct 2023 04:58:10 GMT
expires: Wed, 25 Oct 2023 04:58:10 GMT
cache-control: private, max-age=900
last-modified: Wed, 25 Oct 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68616
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 7d0fbff46cbcbb68a0e0d3fa7ff1d42d
2f9acdb5cdf78919917fedc837fc774c8d732aa8
88c96d675ca633a21367f3f518e2d33f940fed477611d67372273bc5357c9879
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 25 Oct 2023 04:58:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 25ee40154711e09e72514fb1d97998db
9d9c7de2b4e049ca9ee938c1bc2259b915d0ca7b
31fdfba6b02cf76a87b31d19645609d200108e0e967495cb583a40fa963614f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 25 Oct 2023 04:58:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
uniifyapp.com/wp-content/uploads/2022/08/Uniify_Full_Logo_Purple_NoBox.png
188.114.96.1200 OK 8.3 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/2022/08/Uniify_Full_Logo_Purple_NoBox.png
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 140 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 189f285829054f6259e2c9d183938b28
36f13380b283e0dcfd407ce928da0681b76a632a
bbc77fd8099160ca7500cd0749419c86232f3cd2f52a8fe39baab874e7099f2d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/08/Uniify_Full_Logo_Purple_NoBox.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: image/png
content-length: 8340
last-modified: Thu, 10 Nov 2022 13:12:13 GMT
etag: "5a1c40-2094-5ed1d857dc540"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=29sQAvleZCOfCPemmg0yR0a6qorJ6pVgjVuNmBBrSYtFXftwO5cLFgM%2Btgx5uIX0SKbVhcU3qvIPqzDNlzpddJ4k9ohrdqMAuiWmV9KSiHpqzeLJgYlaM94fyW7l73Kd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e205bd5f568b-OSL
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0
188.114.96.1200 OK 172 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (26516)
Size 172 kB (171713 bytes)
Hash c55205bce667f5d812354fd1353e7389
f22de0af271eba636a022c873c94fbcd81b4c89a
c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=1.0 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 16:27:08 GMT
etag: W/"400c52-684e-605a49d108ddf-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FxNKrhoF6ZQcmY0k6DLylzQko%2BPCS9nCXQQq9r%2FwZMjgwX1TlR7WPiIunLs8SYjGeHdRDPjzzpQ6TKr%2BFH0T1wr2Cu%2Bsr%2FFXJ41kCjC6M5upBE9uyU%2BZwl%2Fyd1yO6kWK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20c88db568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-includes/js/wp-util.min.js?ver=0621ff1d1a7a69c31fa9c0bd192756a5
188.114.96.1200 OK 80 kB URL GET HTTP/3 uniifyapp.com/wp-includes/js/wp-util.min.js?ver=0621ff1d1a7a69c31fa9c0bd192756a5
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (1391)
Hash 19d386c9004e54941c1cc61d357efa5d
0a77594006c8d86fdcc0adbc2b9aecaef3869586
3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/wp-util.min.js?ver=0621ff1d1a7a69c31fa9c0bd192756a5 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Tue, 20 Sep 2022 03:52:10 GMT
etag: W/"5435c0-592-5e913c0b08e80-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6k0UCqpOaqcvh6j5S536OvC8YumlKk96LGQFalyGRH9mluEZCUTJImNu8FFSS6Mwf1CW6MOjioZWIJLH8PgeKgp4CUT2oZqldGokbJsH7uJSNsJs9%2FF9clgXOwrE%2BEhm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2060daa568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
js.hs-scripts.com/44045558.js?integration=WordPress&ver=10.2.5
104.16.190.89 10 kB URL js.hs-scripts.com/44045558.js?integration=WordPress&ver=10.2.5
IP 104.16.190.89:0
File type ASCII text, with very long lines (542)
Hash 177569ebb851033544bc8d871e8d7544
bc8407456d741046fb2a853a2b3c475fc56bb869
7431d4f5d9eb096a1b10776cafd337d0a6dc9aab48b83beb98d2b11446926729
GET /44045558.js?integration=WordPress&ver=10.2.5 HTTP/1.1
Host: js.hs-scripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Oct 2023 04:58:10 GMT
content-type: application/javascript;charset=utf-8
x-trace: 2B09697B0F90D3F7D2D9663BC5F3B040EB1EDDFDED000000000000000000
cache-control: public, max-age=60
vary: origin, Accept-Encoding
access-control-allow-credentials: true
x-content-type-options: nosniff
access-control-max-age: 3600
access-control-allow-origin: https://uniifyapp.com
x-envoy-upstream-service-time: 11
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: iad02/hubapi-td/envoy-proxy-5b5c96c966-dz5lh
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-hubspot-correlation-id: bad74cc9-ad1f-49e1-acdc-68fd535f2bdf
x-request-id: bad74cc9-ad1f-49e1-acdc-68fd535f2bdf
last-modified: Tue, 24 Oct 2023 13:16:32 GMT
cf-cache-status: EXPIRED
expires: Wed, 25 Oct 2023 04:59:10 GMT
server: cloudflare
cf-ray: 81b7e206b8bc56c6-OSL
content-encoding: br
X-Firefox-Spdy: h2
uniifyapp.com/wp-content/uploads/elementor/thumbs/iPhoneBadge-pzo4swjp8wwssu35emhhvy4di9hp2dsxgvvzed8b9c.png
188.114.96.1200 OK 9.6 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/elementor/thumbs/iPhoneBadge-pzo4swjp8wwssu35emhhvy4di9hp2dsxgvvzed8b9c.png
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 300 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c667dcf9eb509120c823313ecaae5e17
03092e401974b46758140fca201fd5bf81e7f05b
2ad3972b6718eef119c3faa2629d8f21ec878bcc9c155a365d0ff0b6d41b266d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/elementor/thumbs/iPhoneBadge-pzo4swjp8wwssu35emhhvy4di9hp2dsxgvvzed8b9c.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: image/png
content-length: 9553
last-modified: Fri, 30 Dec 2022 18:09:05 GMT
etag: "5a2404-2551-5f10f7f3c1240"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vCf2xNB6AKwdCyZG1ZSPM9YIvML759RBDSDmfnt%2FrHtxtqkLVFQPnJoKfkdWHnrkWztb1sDGfZzHyPqqyZi%2FGKUebzbTa9xlxJMnPHtSf%2B7ipL6VJaVVwdr9PSgbp9rL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e213bd63568b-OSL
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/radiantthemes-addons/widgets/header-nav-menu/css/header-menu-style-two.css?ver=1698209889
188.114.96.1200 OK 39 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/radiantthemes-addons/widgets/header-nav-menu/css/header-menu-style-two.css?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
Hash 7e082ec359fd3433b432a933a0e252c7
2e157bfd70fbfcda16c198db92c333ed5c77708f
5560f604c96b3934fe96d02cdb4a7e789aa24c7b7671e455c1d95c7911bf5271
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/radiantthemes-addons/widgets/header-nav-menu/css/header-menu-style-two.css?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: text/css
last-modified: Tue, 08 Nov 2022 06:10:07 GMT
etag: W/"5a0a6d-2b561-5ecef6442edc0-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hx7WmACsVz049XEhkjRigu3jG29gIyE1dihTjf2LOiQLHA16w0q75J%2B%2Fvk%2FNRSTBjTqkVHBlPJpbv6oyJYnypC2Zww5JI5uQUO%2BrPBTmk0bUpwcEGwu7asLimOxFsB8e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20ca8f1568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14
188.114.96.1200 OK 7.1 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (8983), with no line terminators
Hash ed3b4417df0895e4cf8465d32b69adc6
a63d0bad2dcb235c62a843eb3e8506e8931cede0
9900b23f9f49af5f34387eb63a8673a563ab131c1e171cfaf14cf8b67a466b9d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:27:39 GMT
etag: W/"48020a-2317-605a49ef0ba60-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6%2BenocK0U653VFEhJ7O90Qr3zutROANK2JGLGLNlmj%2B1LccmsX0DBhZdfQxctstKaM48j1%2BNcQVhOV%2BCw8Jj8vIKzT5zjvN3Elsm%2FoyBCvfnL1ix1beWLXtpM0NIpGqW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2061db7568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/themes/apptek/assets/js/apptek-custom2.js?ver=1698209889
188.114.96.1200 OK 6.8 kB URL GET HTTP/3 uniifyapp.com/wp-content/themes/apptek/assets/js/apptek-custom2.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
Hash 989bd0a333e7119361096dbe1e9b383c
29859c72318b67134973e8fe53950ec55abd0ae4
294dec3e89e3321d01a40eb5f8b3327c6f9f1e73b6792bf55fdd69af43255f56
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/apptek/assets/js/apptek-custom2.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 10:46:20 GMT
etag: W/"5a1b54-268e-5eb4ccd6bf700-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=In0CEkfY%2F0nIBWN1U%2FRqOzqEWDiK0IZrYCrPNDcqAmN613xZOzdCO%2FePEJqOO1QTf8%2F7OUcxcZ5IDKvnpeATwjcTb0XwMCgHXSboEkZCsTQjkLwtnP1W0ZLdr1YyrwI3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205ed95568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/themes/apptek/assets/css/bootstrap.min.css?ver=1.0.0
188.114.96.1200 OK 135 kB URL GET HTTP/3 uniifyapp.com/wp-content/themes/apptek/assets/css/bootstrap.min.css?ver=1.0.0
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type Unicode text, UTF-8 text, with very long lines (65301), with CRLF line terminators
Size 135 kB (135293 bytes)
Hash f7d74d6042421a005379087d13ddbbb8
5567847185d9b32fa07888469639c7680e381a2e
ea203259c9f74b032fa833ea284ac4da8c9b8169e0c71b14a16c0605abf43a48
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/apptek/assets/css/bootstrap.min.css?ver=1.0.0 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Tue, 18 Oct 2022 10:46:20 GMT
etag: W/"5a1afb-28027-5eb4ccd6bf700-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CqcmkS7Yf%2Fdko7oVriyNmTGvvRJHSdy1l4zcNZcYOw%2FZL2DJf8wkvsHcg%2FHTVTSnZ3yl8ezGCpv5W5oVOxSAi%2F0kR9pkmJysWBG4qo5WO1eKN5jik%2BzBe3kO5jDOI5ES"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20c88e0568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.16.3
188.114.96.1 2.3 kB URL uniifyapp.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.16.3
IP 188.114.96.1:0
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (4957)
Hash aa98805dbc21b79555011ded6e33a1bd
c150db214b80f6739fc16e8bccd02187e9d542a6
672416f94b97a3b46527b6e624a7f6110addea8c498acb0b7f80ad255eebb8d3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.16.3 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:27:07 GMT
etag: W/"3e2f89-1385-605a49d0a7356-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hWbnWO5%2FCME4k5L4RTyA4poli9eJckDU%2FKYo1OBGky%2FkPHoTAkspj6DIJJnE%2FOyh2livRd9DE%2FMj95gXiPhBcVYggAP5cYfQhkgYi5RClo%2Fh%2BbduLn2En5meaeuA5Md5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2063dd6568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
188.114.96.1200 OK 66 kB URL User Request GET HTTP/2 IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (54713)
Hash f7b3dbe41a523e78b00fc14c1f8072b2
56a7b162403b870822d2f2056544fcb04ffb68fb
e45dfdda7e93fc0a056c917021249320d38d4db0e7b7300088de6dc3209a4676
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Oct 2023 04:58:09 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.0.30
link: <https://uniifyapp.com/wp-json/>; rel="https://api.w.org/", <https://uniifyapp.com/wp-json/wp/v2/pages/1177>; rel="alternate"; type="application/json", <https://uniifyapp.com/>; rel=shortlink
server-timing: wp-load-alloptions-query;dur=1.7, wp-before-template;dur=59.48
set-cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; path=/; secure; HttpOnly
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yNg7T7Xmx0yO%2BpvCzzVSDCm1SbrOCGm4W6zSVeqtZbrxy6LYwlOlV%2BTJoXKjOD0sJ8oFpvyIqSz20CXavciUPs772KigDb5V8H0U8YrBGR%2Bg6pueTbjRDRX5HXRXqZOx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e1fc2c92568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m01.amazontrust.com/
IP 143.204.53.97:0
Hash ea248d8678038d7cb52b5254b4232edd
ed5d8994de641f30b6d3787bfe1e29535d2caa3b
b499561ac00aabb43feec5edcc237db223f74ed9c608a5e4c804b558d00c3a76
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 25 Oct 2023 04:58:12 GMT
Last-Modified: Wed, 25 Oct 2023 03:12:10 GMT
Server: ECAcc (ska/F6E3)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: uTjzQiJH4O_6pzhkfUVdKdoo2IcNzarnhHwQ7Y8zXJp5QRMplxjCPQ==
Age: 6362
api.pushowl.com/api/v1/uniifyapp.com/subscriber/config/widget/?guid=fa94175ece16e569a28db2d6a982f5a2&platform=sendinblue
54.81.132.38200 OK 0 B URL OPTIONS HTTP/2 api.pushowl.com/api/v1/uniifyapp.com/subscriber/config/widget/?guid=fa94175ece16e569a28db2d6a982f5a2&platform=sendinblue
IP 54.81.132.38:443
Certificate IssuerAmazon
Subjectpushowl.com
FingerprintC6:AA:4B:BC:A8:F4:5F:ED:0E:5C:21:4E:D9:9A:5B:8D:28:5C:6D:15
ValidityWed, 31 May 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/uniifyapp.com/subscriber/config/widget/?guid=fa94175ece16e569a28db2d6a982f5a2&platform=sendinblue HTTP/1.1
Host: api.pushowl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://uniifyapp.com/
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Oct 2023 04:58:13 GMT
content-type: text/html; charset=utf-8
content-length: 0
server: gunicorn
vary: Origin
access-control-allow-origin: *
access-control-allow-headers: accept, accept-encoding, authorization, content-type, dnt, origin, user-agent, x-csrftoken, x-requested-with, x-pushowl-partner-key, partner-key
access-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT
access-control-max-age: 86400
X-Firefox-Spdy: h2
uniifyapp.com/wp-content/themes/apptek/assets/js/bootstrap.min.js?ver=1698209889
188.114.96.1200 OK 81 kB URL GET HTTP/3 uniifyapp.com/wp-content/themes/apptek/assets/js/bootstrap.min.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (64512), with CRLF line terminators
Hash d4f0fd7f138b89ad4c345909c6cb99af
0d43d182ab11040cbf3e631d21feec2c9fc5e3d4
6d143656f7d2fc6e9d5e2e1a327924903a432c04bdfbe0823048b2378cfb738b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/apptek/assets/js/bootstrap.min.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 10:46:20 GMT
etag: W/"5a1b55-390ff-5eb4ccd6bf700-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BCTOSDa4sTqB2OR66INWd%2FbZ%2BCOLBBjEUVg3Km9po4nNrzLFoFAOq3X5uc61qRBx1lmx1Q6GmVv00juyVl38QWEq7oi53b0a5UXQZkieB4ZRuqi5j5kjitK2lKo3Za5Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205ed98568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/css/rt-animated-heading.css?ver=1698209889
188.114.96.1200 OK 6.3 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/css/rt-animated-heading.css?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
Hash b4037fb3f85e897fa9fea9d8c24d4701
f2b44c57af31e8060c8f8ae56d540ae6163c45ff
12392e4b51613ac339ae93efa26dc1d730bb34b8368a2dbe0f8637ce2b3d6a4d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/radiantthemes-addons/assets/css/rt-animated-heading.css?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Tue, 08 Nov 2022 06:10:07 GMT
etag: W/"5a03c2-768b-5ecef6442edc0-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oauag736MslOOlv9sj5toUYRNbHZAwf3s2UQdpp3f%2BOtcNR4c7dnGIiD27dckJJfabISweomu5%2FPmHnhL9FhzacQpQACLmjLzEHqgSXjB8IJhWUyAJJowUvVM%2B%2FmTf0I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20ca8f0568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/2022/11/9.png
188.114.96.1200 OK 3.1 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/2022/11/9.png
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 170 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 3a0cd3b429a5c9fc81fbd990a1930456
edaf64b806a3ef804727ebac8a65a0a10a5765c5
51515a94878dd8d42ec21bc0fdfab12d06ae2cb5925b2359067f9eaffd78b4c3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/11/9.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:13 GMT
content-type: image/png
content-length: 3088
last-modified: Thu, 10 Nov 2022 13:30:19 GMT
etag: "5a206b-c10-5ed1dc638d0c0"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6uN3XuGr%2FbokV2zd7wLIaBVDQpBUyKsPe5uLDMcxlDnxEP5PNrh3pG6hp%2BrWvUNKT1%2FfzWvWsqSZeW87k8V8Nteahl4XlHZtysggVhGw9LQ6%2FaD9ZdA%2BQR2w%2BDe7cHck"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e214be3c568b-OSL
alt-svc: h3=":443"; ma=86400
embed.tawk.to/63b90e9f47425128790c21d7/1gm5e28ep
172.67.38.66200 OK 689 B URL GET HTTP/2 embed.tawk.to/63b90e9f47425128790c21d7/1gm5e28ep
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash 76a76cab357851142c3bd1c742204654
9cfae8709c2d2a56ace8eb68182995d871a24757
ee37c5b60976cfbbced36b07815dcc06eae9b64aa9a9f17f9a700d3ca8c50812
GET /63b90e9f47425128790c21d7/1gm5e28ep HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=7200, s-maxage=3600
etag: W/"stable-v4-6532b9314ab"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e20ecd0656ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 3470b494ff1af9d0328defc4186f3137
a10332f0e842fecc87b755c7916037097259bbcb
73ba1ebd33bac734e602778a46acbb788ffb8f211a045207bb3c840152e4902d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 25 Oct 2023 04:58:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 3470b494ff1af9d0328defc4186f3137
a10332f0e842fecc87b755c7916037097259bbcb
73ba1ebd33bac734e602778a46acbb788ffb8f211a045207bb3c840152e4902d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 25 Oct 2023 04:58:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
uniifyapp.com/wp-content/plugins/mailin/js/mailin-front.js?ver=1695054488
188.114.96.1 3.5 kB URL uniifyapp.com/wp-content/plugins/mailin/js/mailin-front.js?ver=1695054488
IP 188.114.96.1:0
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
Hash 24d84fa840063c7b26e4e7fcbb2e11d7
51ba6df9f6b61af9a87d6353fd96e1ab10d05113
218449f902b88a3f6d37a9c565d926d6875f03c475bc37c746c42563932327a5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/mailin/js/mailin-front.js?ver=1695054488 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:28:08 GMT
etag: W/"3e1f83-32e9-605a4a0a8fbe9-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E6n1GfmZkRvW2dXwF%2BrXdYRyq6izseSU%2BTnBPThkoVCF%2F%2B0J5K8tIAakNtsS9RU%2F2vxXA%2BFq0dTL7tkC%2FpJYMEnyamwJm93OG5nXjjYVPAlRYGczBckMJwOcnjhL9xXG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205dd76568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Plus+Jakarta+Sans%3A500%7CPlus+Jakarta+Sans%3A700%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A500%7CPlus+Jakarta+Sans%3A700%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A700%7CPlus+Jakarta+Sans%3A700%7CPlus+Jakarta+Sans%3A700%7CPlus+Jakarta+Sans%3A700&subset=latin&display=fallback
142.250.74.106200 OK 28 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Plus+Jakarta+Sans%3A500%7CPlus+Jakarta+Sans%3A700%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A500%7CPlus+Jakarta+Sans%3A700%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A700%7CPlus+Jakarta+Sans%3A700%7CPlus+Jakarta+Sans%3A700%7CPlus+Jakarta+Sans%3A700&subset=latin&display=fallback
IP 142.250.74.106:443
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint28:23:2B:8B:2D:09:6C:BB:06:7A:35:80:95:BB:F8:03:41:C8:99:2C
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type gzip compressed data, max compression\012- data
Hash 11ba76b4d4ffde821e50c9341a7763a9
eedbab3be1efc4530a24c350ae07cde82e1a374b
2ecf1e292753eab489f61a57f750ff65114d02d9e5b0259608781f5584b0f24b
GET /css?family=Plus+Jakarta+Sans%3A500%7CPlus+Jakarta+Sans%3A700%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A500%7CPlus+Jakarta+Sans%3A700%7CPlus+Jakarta+Sans%3A600%7CPlus+Jakarta+Sans%3A700%7CPlus+Jakarta+Sans%3A700%7CPlus+Jakarta+Sans%3A700%7CPlus+Jakarta+Sans%3A700&subset=latin&display=fallback HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 25 Oct 2023 04:58:13 GMT
date: Wed, 25 Oct 2023 04:58:13 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
uniifyapp.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
188.114.96.1200 OK 61 kB URL GET HTTP/3 uniifyapp.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash c4e68a0f3463c0bd3c39eab38815e881
0ce58644e9f3c5063a11453ff287c5ec096465a7
ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Thu, 02 Feb 2023 16:36:32 GMT
etag: W/"543752-53be-5f3ba2adac400-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JboflMv6YUZxHjiHXQtzZjYr9QhjKRtUKN3RXpChssFVj%2B4S742j%2FGVOfevBEzwpXHzG%2Bsoh9bnZH3wgLp1JXnq6%2BKnbzuX9aogwh9CNj8GpmHqskCG2KPbN1SsSEEyU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2063dde568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/2022/08/Uniify_Favicon1-300x300.png
188.114.96.1200 OK 4.3 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/2022/08/Uniify_Favicon1-300x300.png
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 300 x 300, 8-bit colormap, non-interlaced\012- data
Hash 1fcb374e367c6e55178928dc584b1390
62231bc4a3c0cd20a4a493fc38b374e4b0f6b26d
a45fdd2a947c93e1d218c38043fa11cd13a6ca88e53eef943008609ac56fa585
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/08/Uniify_Favicon1-300x300.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0; po_visitor=WHPGavoFw9Th
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:14 GMT
content-type: image/png
content-length: 4263
last-modified: Mon, 09 Jan 2023 14:18:19 GMT
etag: "5a1c3c-10a7-5f1d5705ca0c0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vds8RRdGVhR%2FTinYkK8w5ubm1zBKOFhXfIEP4yJrqhhxBoO8NA%2FkF%2FUcuZz10s8bOAklkcg9xurLThbUI%2BEtSnQ9KTMt4TlBqqhkUo1SqxfP2MCJ0d5%2BZZi8v%2Fj9HzS5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e21d0b5b568b-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/abeezee/v22/esDR31xSG-6AGleN2tWkkA.woff2
216.58.207.227200 OK 17 kB URL GET HTTP/2 fonts.gstatic.com/s/abeezee/v22/esDR31xSG-6AGleN2tWkkA.woff2
IP 216.58.207.227:443
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 17072, version 1.0\012- data
Hash 45462752342c1004d9c92488ebcb5e0b
3abfc280cfddd6bc1962e7e2d582af70e799f35e
e9b78ce1cbff9e258afa3a91f5b9a0fe64ce792691eda7f66b9eaad19e468e83
GET /s/abeezee/v22/esDR31xSG-6AGleN2tWkkA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17072
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 21 Oct 2023 11:15:41 GMT
expires: Sun, 20 Oct 2024 11:15:41 GMT
cache-control: public, max-age=31536000
age: 322953
last-modified: Tue, 19 Apr 2022 18:27:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
uniifyapp.com/wp-includes/js/underscore.min.js?ver=1.13.4
188.114.96.1200 OK 36 kB URL GET HTTP/3 uniifyapp.com/wp-includes/js/underscore.min.js?ver=1.13.4
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (18798)
Hash f88d5720bb454ed5d204cbdb56901f6b
f1952292fde4b15936e9aac16b2b9896684db95b
726b820e44f6ab90ad991d30a4bf26d3a5d71493cbcd1fb1efd0d14e89b9df2a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 15:18:25 GMT
etag: W/"5435af-4991-5e9aa27ccd240-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lmxoJyatlwLMlnZ3o4SJKfdEKKtX8HkqElepI57ggwk1ZYt%2FsFCZlbbQOxL9tFlUpM3AxwLmhMw3yShQGwyU%2BocGJHqafCvf%2BsqrEEXEn7LvHbDHz8btbDFVX0MLIRnc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205fda5568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/actor/v17/wEOzEBbCkc5cO0ejVSk.woff2
216.58.207.227200 OK 22 kB URL GET HTTP/2 fonts.gstatic.com/s/actor/v17/wEOzEBbCkc5cO0ejVSk.woff2
IP 216.58.207.227:443
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 21976, version 1.0\012- data
Hash 7ee7f470152787952958d6adfa07b2ac
14a09075b2cbec9ff65302de9d634f9011f70e53
b31aaefa522d67846638fa4181bbb22375bd0cb1beb37d514609c3821953161a
GET /s/actor/v17/wEOzEBbCkc5cO0ejVSk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Oct 2023 10:11:48 GMT
expires: Sat, 19 Oct 2024 10:11:48 GMT
cache-control: public, max-age=31536000
age: 413186
last-modified: Tue, 19 Apr 2022 19:22:29 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 3470b494ff1af9d0328defc4186f3137
a10332f0e842fecc87b755c7916037097259bbcb
73ba1ebd33bac734e602778a46acbb788ffb8f211a045207bb3c840152e4902d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 25 Oct 2023 04:58:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
uniifyapp.com/wp-content/themes/apptek/assets/js/swiper.min.js?ver=1698209889
188.114.96.1200 OK 72 kB URL GET HTTP/3 uniifyapp.com/wp-content/themes/apptek/assets/js/swiper.min.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (867), with CRLF line terminators
Hash 510a02eb96dd68d60ad581ec8ebada54
ee17aabecea28850029787a7581c78c770a2b410
5e6eaf05f99190d360ad0fc8d1dcdcccfc560a9acc620f974c63f169f1a53554
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/apptek/assets/js/swiper.min.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 10:46:20 GMT
etag: W/"5a1b65-38db6-5eb4ccd6bf700-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qZBGcpssqY7u5P7pYKarw%2FEPH53ifGbYyeSPGsSbh%2FBWQvpbKT2LzpumbyWdonws1KbSiB3YA0sZhYk9z0wrbIcOp2J4N7193iqwc1oDD4XXRc%2Fk%2Bbivx6S1LaV2Yevi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205ed9a568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/2022/12/lumiq-copy.png
188.114.96.1200 OK 6.8 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/2022/12/lumiq-copy.png
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 170 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 77632d1daf9fbd708cc85803dae27330
8c4762ea234ef1c3089f2bff801c10527bf0b743
d98ea6ef7df469d978dba9fbc2b17c46bbd27d200cb6f4e448c40a3c3e1a6193
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/12/lumiq-copy.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0; po_visitor=WHPGavoFw9Th; TawkConnectionTime=0; twk_idm_key=WZNvoPdKsW6ryirZpCiMt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:15 GMT
content-type: image/png
content-length: 6815
last-modified: Tue, 27 Dec 2022 16:03:02 GMT
etag: "5a212a-1a9f-5f0d162ebb980"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HDjXKJxpH0MMpPs02ArMFwAhREFkoxju4HL6HmhTZGyfd97mjlhARHqfzAVfwkFmJPjamCX9g8LAYPrzIS6CX1SS20c5zhiDoCSlHbwgh%2FwNbs%2F0zwwZQXA8S7M7oUT9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e226f970568b-OSL
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0
188.114.96.1200 OK 53 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (14869)
Hash 7a5dea0a705cc2f4cd87dbaaa6666bc6
678bc6f750f13adb29bbc158eb0d9cd813b736fa
97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=1.0 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:27:08 GMT
etag: W/"400c64-3acf-605a49d10cc5f-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z8r43ijKbjGkPMMKf7Cy1TKRUnGVl5PAFSMYeVlbrjHHmnUcJ%2Fhof5Z6mXtkOcb4esyS8YNV%2F%2BVcpoM1TQkgH9WnhQKCegdyF0GnjZOY9IHQZEYZK982QSXJm5wBN%2BB%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205dd7a568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.min.js?ver=1.0
188.114.96.1200 OK 43 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.min.js?ver=1.0
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (2294), with no line terminators
Hash 12619efa105d916b7ea8f4e232d5b1c9
f7b45b315fc4a1d28a26737164054c623271ef79
0e8d938149cb71defe5c209b6a89265fb2c8f88fd12b8fc6679c43b6586ccbd4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.min.js?ver=1.0 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:27:25 GMT
etag: W/"421a3f-8f6-605a49e1ce6a7-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t7i7SvI6WLyYL%2FkD3%2FK1LXt8B7KnCmh0eLM%2Fq7FlJzanlrwE1rCxUbUBdbSu%2ByE2XCSm4pLPj1sge%2Fn5QleNHKAitKJqpA4TGvoNjMiK2RYLNz0OwdcMYfp3dIc%2BW%2Brd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205dd82568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-chunk-48f46bef.js
172.67.38.66200 OK 24 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-chunk-48f46bef.js
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (19830), with no line terminators
Hash 2db220788087b36890409ff7c1e696f6
8932a6065db38204386216d2465efb768fcba177
d7b544e4b51a41236bb88d35bb42185f43a9b98689c7ccdc634521d423457445
GET /_s/v4/app/6532b9314ab/js/twk-chunk-48f46bef.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:15 GMT
content-type: application/javascript
last-modified: Fri, 20 Oct 2023 17:31:43 GMT
etag: W/"2db220788087b36890409ff7c1e696f6"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 386132
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e2286d96b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-chunk-common.js
172.67.38.66200 OK 49 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-chunk-common.js
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65458)
Hash 101673b7311ff001dc01c78ea91eb835
ade515251a440f3651e3d0fb75622f0e4ddfa26e
e5e508148944772661e34ab2a35434bccd1b101f8122eb57936206dda21d76e4
GET /_s/v4/app/6532b9314ab/js/twk-chunk-common.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Oct 2023 04:58:14 GMT
content-type: application/javascript
last-modified: Fri, 20 Oct 2023 17:31:43 GMT
etag: W/"101673b7311ff001dc01c78ea91eb835"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e220481756ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
uniifyapp.com/wp-content/uploads/2022/11/3.png
188.114.96.1200 OK 8.8 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/2022/11/3.png
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 170 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash c90f0d635cb28fc706210df6207a1195
e880e632655351c80a90a365804ffb9e3fb8cc6e
0234d64c10a052c2cad3f0c07bf6b0dc188e4eda083d0e42bd805b28fe022fc1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/11/3.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0; po_visitor=WHPGavoFw9Th; TawkConnectionTime=0; twk_idm_key=WZNvoPdKsW6ryirZpCiMt; twk_uuid_63b90e9f47425128790c21d7=%7B%22uuid%22%3A%221.1vWzKRM9a6Rqo2qi3K1GZLxeVovoMOM4MIlIDbVAjSuZuli72zK5LeweHbQBcijquoDnNuUeRv81elWHEz46zsWoJOjvwUz0dcPndRMGLFXHBwMVINi1Ld1%22%2C%22version%22%3A3%2C%22domain%22%3A%22uniifyapp.com%22%2C%22ts%22%3A1698209896478%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:17 GMT
content-type: image/png
content-length: 8791
last-modified: Thu, 10 Nov 2022 13:30:18 GMT
etag: "5a205f-2257-5ed1dc6298e80"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bx1w83TX%2Fmr1FpZXX8WhuYWejJlDXXtMVYRr4mCDdmvwTUFqSjWRljivRs7uNFw2nrP5YMxng6tzadg9f7axNPGwxr8tBxLG5CmD90WVA5GznxPp%2B1B%2BbsJJ%2Fqeq6rgu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e230df0d568b-OSL
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/2022/11/6.png
188.114.96.1200 OK 5.9 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/2022/11/6.png
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 170 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 8a433162097eb8ef8e51e7c13bcadab8
dce4b78109f927d34c3ce6d5bce0867d594be0ef
f44ddcc39a064cea1995c17331036f109006474838d05687968491974b76aea2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/11/6.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0; po_visitor=WHPGavoFw9Th; TawkConnectionTime=0; twk_idm_key=WZNvoPdKsW6ryirZpCiMt; twk_uuid_63b90e9f47425128790c21d7=%7B%22uuid%22%3A%221.1vWzKRM9a6Rqo2qi3K1GZLxeVovoMOM4MIlIDbVAjSuZuli72zK5LeweHbQBcijquoDnNuUeRv81elWHEz46zsWoJOjvwUz0dcPndRMGLFXHBwMVINi1Ld1%22%2C%22version%22%3A3%2C%22domain%22%3A%22uniifyapp.com%22%2C%22ts%22%3A1698209896478%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:18 GMT
content-type: image/png
content-length: 5893
last-modified: Thu, 10 Nov 2022 13:30:18 GMT
etag: "5a2065-1705-5ed1dc6298e80"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SZQts7A6msG4Ocl1aAgDeFbHnUZxAq5WCc4eZCjP%2FmmzAZSo9Nt8iUtIxrTre2d182lGpq7hX41B%2BcSGJuK6sADWax2KoXyHISccNSpsMF3prEXmVs0veX4iV%2BrsTpj8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e23a2c44568b-OSL
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/2022/12/goask.png
188.114.96.1 11 kB URL uniifyapp.com/wp-content/uploads/2022/12/goask.png
IP 188.114.96.1:0
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 170 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 8455c8e5abb11f467b578decbd49b754
73b27af06b22332b8213c5f94be6eb62392af19f
8f09b730e315c0940763a6cdf40cbd0737d60e213691a52556d901c0204c330a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/12/goask.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0; po_visitor=WHPGavoFw9Th; TawkConnectionTime=0; twk_idm_key=WZNvoPdKsW6ryirZpCiMt; twk_uuid_63b90e9f47425128790c21d7=%7B%22uuid%22%3A%221.1vWzKRM9a6Rqo2qi3K1GZLxeVovoMOM4MIlIDbVAjSuZuli72zK5LeweHbQBcijquoDnNuUeRv81elWHEz46zsWoJOjvwUz0dcPndRMGLFXHBwMVINi1Ld1%22%2C%22version%22%3A3%2C%22domain%22%3A%22uniifyapp.com%22%2C%22ts%22%3A1698209896478%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:20 GMT
content-type: image/png
content-length: 11267
last-modified: Tue, 27 Dec 2022 16:03:02 GMT
etag: "5a211c-2c03-5f0d162ebb980"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k6xWD8YHPg58OZeJ%2BKbhEqUHXHfzKlbmaeOwUifQb2BGZxXccGKlIfUV0roruzzSXEPHAYCHNxxZgYN6F8CShnMvNppBQsK1TkuIqhjTGuw%2BC3MTCY3asxSr%2FMWgw4Lu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e243d982568b-OSL
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/2022/11/10.png
188.114.96.1200 OK 3.3 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/2022/11/10.png
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 170 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash ef364f2a87ef472fcf3924a320ccb210
9bbdf4bdd9c6c78c0e1de36116840791c21f5dfb
da08b92eb4a06b7ec78181aeea10b1b7d15b5281ee1d00446d43eb38d8092701
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/11/10.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0; po_visitor=WHPGavoFw9Th; TawkConnectionTime=0; twk_idm_key=WZNvoPdKsW6ryirZpCiMt; twk_uuid_63b90e9f47425128790c21d7=%7B%22uuid%22%3A%221.1vWzKRM9a6Rqo2qi3K1GZLxeVovoMOM4MIlIDbVAjSuZuli72zK5LeweHbQBcijquoDnNuUeRv81elWHEz46zsWoJOjvwUz0dcPndRMGLFXHBwMVINi1Ld1%22%2C%22version%22%3A3%2C%22domain%22%3A%22uniifyapp.com%22%2C%22ts%22%3A1698209896478%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:22 GMT
content-type: image/png
content-length: 3280
last-modified: Thu, 10 Nov 2022 13:30:20 GMT
etag: "5a2059-cd0-5ed1dc6481300"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LQgEhNY%2FPtAypruNQafKs69Ibz6dcvRNaIyHSo3i1sRvVttf%2BRLtWkvoVJjB84zglquPhnqj7AWuo0MXX4J0P8nHAXJX8Pzy7W5wl6c7cvUtjDrx3z7UHG9LQbT9amc%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e24d6f6e568b-OSL
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/2022/11/5.png
188.114.96.1200 OK 5.3 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/2022/11/5.png
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 170 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 39edb661c91961c10691571176f8e426
a2eae609ff207f5b2c09ab8b6c7e470bbdf23824
6e554b16c571417d40f4342b18bb1cc87c3d3c2702537ecc5a56e276645b56a9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/11/5.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0; po_visitor=WHPGavoFw9Th; TawkConnectionTime=0; twk_idm_key=WZNvoPdKsW6ryirZpCiMt; twk_uuid_63b90e9f47425128790c21d7=%7B%22uuid%22%3A%221.1vWzKRM9a6Rqo2qi3K1GZLxeVovoMOM4MIlIDbVAjSuZuli72zK5LeweHbQBcijquoDnNuUeRv81elWHEz46zsWoJOjvwUz0dcPndRMGLFXHBwMVINi1Ld1%22%2C%22version%22%3A3%2C%22domain%22%3A%22uniifyapp.com%22%2C%22ts%22%3A1698209896478%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:23 GMT
content-type: image/png
content-length: 5321
last-modified: Thu, 10 Nov 2022 13:30:18 GMT
etag: "5a2063-14c9-5ed1dc6298e80"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L0oEe2PfyXCQUITP5m%2FStNi%2BvCBMGiCjuxQhlyRhV0Hh9ErPNiMQ2r5yoegdJ7gsfcUGnXkzC6J67dPYAHtngkdzTci%2B8loJgXD8tyolVk%2FNCVt8McDqPsBqLOiMXyQy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e256bc9a568b-OSL
alt-svc: h3=":443"; ma=86400
va.tawk.to/log-performance/v3
172.67.38.66200 OK 8.1 kB URL OPTIONS HTTP/3 va.tawk.to/log-performance/v3
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash 51c1cb7dee93235a79b35f70bf7514a4
3d5d7de1eaea8cd626889e26cc68e42cfb1d48f0
1c4cc4f69757ad987a5453fa76e46ec7ab3bbf23fc46b45074f3e6bc044ecdbe
OPTIONS /log-performance/v3 HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://uniifyapp.com/
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:16 GMT
x-served-by: visitor-application-preemptive-x4d1
access-control-allow-origin: https://uniifyapp.com
access-control-allow-credentials: true
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e22ca803b527-OSL
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/themes/apptek/assets/css/apptek-custom.css?ver=1.0.0
188.114.96.1200 OK 55 kB URL GET HTTP/3 uniifyapp.com/wp-content/themes/apptek/assets/css/apptek-custom.css?ver=1.0.0
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
Hash 4cf96e1c612a1ea3459f22c4ba4f513c
63c41f6a96ce666b5d633d4f04fe31c4e23f6886
3baf285c4d6747fe851fe8ace1e747c4c65de19b67bd62c8c04cbb3df9f94182
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/apptek/assets/css/apptek-custom.css?ver=1.0.0 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Wed, 04 Jan 2023 10:36:38 GMT
etag: W/"5a1af7-d625-5f16dc25a9980-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RxJIt6o8D0by1lZBSTHsLA6%2Bi06iNaz6AnHLUVsJa87CjjWCCdZG%2BSjhubzslYZlVkid9Gw8cRzsy%2BlHdeH4JfiCM3lOQO8cJZrmLb1dUop2yz8E%2BQdX%2B4KSl8VcILfl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20ca8f3568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/css/rt-accordion.css?ver=1698209889
188.114.96.1200 OK 19 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/css/rt-accordion.css?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
Hash e1561407fc81fd2d8154e939c8cfce7f
40639b38ef6e42c2bf17084f381dcf2e27611e2a
cc8bcea8966405ca76ff5b133093cff923341fa6e132f81895481853e2bea899
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/radiantthemes-addons/assets/css/rt-accordion.css?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Tue, 08 Nov 2022 06:10:07 GMT
etag: W/"5a03c1-4bcd-5ecef6442edc0-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cwwTlLidnuM7r1GnqfsryZA8KwpBqrke3I9nXL49vmiRt1WeP5QMrP5PsUf543SIF2%2Fbj824xHlMkCgXvp6DIS7hoBemXAhrU3VssCXt3mnYdwFLbSCmRWnNNSScPSKU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20ce92a568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.16.3
188.114.96.1200 OK 18 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.16.3
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (10019)
Hash 4601ba55044413706c2022cb6c1c3d05
5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec
fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.16.3 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 16:27:07 GMT
etag: W/"3e2f8f-4824-605a49d0a773e-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eue5OKEEO21Nnc%2Bu5xoeXtbpynPWDFan3ktP72aGvkHuwEKNDLatsQUT3GOy%2F3qKBQ7on15zytfSE0e60VHzRoaCj0Hfi%2B87DZrqs%2FtsBgRgujbe5ILDg6kO9Wl45vMD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20d1941568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-chunk-f1596d96.js
172.67.38.66200 OK 11 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-chunk-f1596d96.js
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (10994), with no line terminators
Hash 600a2f4470417b0dc31370ce80ae1ffc
5422fc51726cbb78622f200774a52acb53466436
6e2eb78bbdccbd75f7c00112d02abe33dd43902f5b7e7fc29fc1f8a8439c0c0b
GET /_s/v4/app/6532b9314ab/js/twk-chunk-f1596d96.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:15 GMT
content-type: application/javascript
last-modified: Fri, 20 Oct 2023 17:31:43 GMT
etag: W/"600a2f4470417b0dc31370ce80ae1ffc"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 386075
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e2285d91b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.min.js?ver=2.4.0
188.114.96.1200 OK 9.9 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.min.js?ver=2.4.0
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (10258), with no line terminators
Hash 20e6b58be2809cd5c0f9e1873e7fbb3b
1013fd00cdfff4cc7a85012b23ba800a316920c4
6595b66acb6f2f1de8276849fa8cdded0dd68e8662657d18871b8c707952c910
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.min.js?ver=2.4.0 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:27:25 GMT
etag: W/"4415d2-26ba-605a49e1d3c97-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nuQp2vCRkC%2FJHy1hp9tOyiVpoH2PL3hdKHA1Zn31Qz9rji2Hv5lr1HHEZpsvgzwcYfVKSgQa5E9jr%2B0hWAonDK7rv4jaiJpET0NRqiOZbwKfiitEKgVD94cirPdS323y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205ed8c568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/2023/01/l1.png
188.114.96.1200 OK 110 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/2023/01/l1.png
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 707 x 999, 8-bit colormap, non-interlaced\012- data
Size 110 kB (109958 bytes)
Hash 80266f29e7a7f7c125a23a64695fe276
e73f86b971ce9a9fd176abb162105b2f8890d820
cbb3755067706e9b9a2b7165790e5bad0b48ce8a19a05071cfbf347a4e2d7344
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2023/01/l1.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: image/png
content-length: 109958
last-modified: Tue, 10 Jan 2023 05:13:43 GMT
etag: "5a230f-1ad86-5f1e1f28fcfc0"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B13gZJWdqDdnaDMVVeX%2BCzo572D4kGnBBlhfcIIXTXsb1XafDbqaIcqjePp4fhMclnaE4omhZEUElEX%2B9E0YRLVdLurIAsulTQbn8anerzeOyfoBPn0J%2FqM7Y7%2Fv7fs7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e213edae568b-OSL
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/2022/08/Uniify_Favicon1-150x150.png
188.114.96.1200 OK 2.0 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/2022/08/Uniify_Favicon1-150x150.png
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 150 x 150, 8-bit colormap, non-interlaced\012- data
Hash 30680b0c78342f559eb5e42a4aaa3828
53713e66213dbc1a082352208e3b3cc6dbea16c2
020c65f41e552509ca2a5ca30801f0589313839234df188352091d7607db21db
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/08/Uniify_Favicon1-150x150.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0; po_visitor=WHPGavoFw9Th
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:14 GMT
content-type: image/png
content-length: 2007
last-modified: Mon, 09 Jan 2023 14:18:19 GMT
etag: "5a1c3a-7d7-5f1d5705ca0c0"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ie1a%2BRFvLcp8bFPdA%2FdALl8bpptYJEXdVX2xMHKx%2FeVuelHviAR5mtc6YEhEi6GjQJydJhVzXEDtA8OifFIqI21p0z8dibDiQKW%2FgzqJQX5J9uwKh1WVLdYbIfxTQzUi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e21d0b5c568b-OSL
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-main.js
172.67.38.66200 OK 121 B URL GET HTTP/2 embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-main.js
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 3b41342f7e3be590563e8e3b5ff770c7
c9ca54d23ea78b320f080b76e22bb6b4e704d55f
ef04d89daeed55613a63a4af62c147ce86e4a7f22c8ce700dd6bdb11ab187e43
GET /_s/v4/app/6532b9314ab/js/twk-main.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Oct 2023 04:58:14 GMT
content-type: application/javascript
last-modified: Fri, 20 Oct 2023 17:31:43 GMT
etag: W/"da5bb1dc647470204df0e49f5afac2de"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e220381056ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
uniifyapp.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
188.114.96.1200 OK 12 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (12198), with no line terminators
Hash 3819c3569da71daec283a75483735f7e
ecd40a5cc6f0b76200c454ca880210dc301cfab8
214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:27:08 GMT
etag: W/"400ca0-2fa6-605a49d16bfd7-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=erSuPULEP65yv1XzX860VWNU6%2BmzhMZFvNhuXeGR5Ebnr0hCGPXezTNkl34tndoB%2F4y8qec1z%2BVYKGJsTUyLGJF7wRzHdRnXTo81tq4m56L7cJZLISCZMfZSCtUz254i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2063ddb568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/elementor/css/post-1177.css?ver=1695054608
188.114.96.1200 OK 117 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/elementor/css/post-1177.css?ver=1695054608
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (43311)
Size 117 kB (116914 bytes)
Hash 92d415585452b308b32e87cd30f80cda
6d20ad635f61e34655a520edb051c11a241bd10f
0fe9bdaa1108d160b9aa5b32541d008649595220f03b319cbc1a2931c10640bf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/elementor/css/post-1177.css?ver=1695054608 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 16:30:08 GMT
etag: W/"5a000f-1c8b2-605a4a7cb495a-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y3zwN%2B2us%2BjXAaUeYdoH5IEuj7vyrv2L4FXvR2qttiFjFruWev1dTJaLD7g3v16DRlwoklaBHJpBhyi%2Bwru9FUwKrG04BIcZD8h1f4YJLQM414XtqBC%2BkubaWtmI%2FNRg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20d1944568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/images/right-arrow-img.svg
188.114.96.1200 OK 592 B URL GET HTTP/3 uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/images/right-arrow-img.svg
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (633), with no line terminators
Hash f64b690d7954dfce66d8a04312b32608
e8336da255a273093b3721080947b1be0f9286a2
67de8b0806426ff34af8c8f52251331093791b298d99cf694ddde84d0d9b833e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/radiantthemes-addons/assets/images/right-arrow-img.svg HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/css/rt-testimonial.css?ver=1698209889
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:13 GMT
content-type: image/svg+xml
last-modified: Tue, 08 Nov 2022 06:10:07 GMT
etag: W/"5a0499-250-5ecef6442edc0-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZOSwn54fawaCUoL2w8DPvaaAf801Yt4CFycDbZcZ0XJqUFZkMW7e2oo%2FFfXtV8j2r8R0AQtr3eEk%2FYSfBX0BRSnJKWvu16kJC4op%2FQO7rjDnQHoWSTGX%2BfVvRpQ%2BgnTw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2141dc1568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.0
188.114.96.1200 OK 88 kB URL GET HTTP/3 uniifyapp.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.0
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (65447)
Hash ff04dd1ef5c67998d8652330c0441689
5e6ff5bd5240181a8bdea983837f39ac231dac4d
5c93f77799d122fb5255ee24da285f9f228cc118cba11e6ceb2b6bda8cdf4164
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.0 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Fri, 26 May 2023 11:33:35 GMT
etag: W/"543742-155ba-5fc971b7d21c0-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=df1L91e7KeNxOamwiLhgKtoWEIxBHktiCE78hMAaGKTEIJldlbdwEwMfgjAIcKYJW6bG8F2PpwaQ%2Fjcp8b7tZJrMq%2Fm6d4hiATe4XfptCPlX7hkvjCZFVesOdF1eJMs0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205dd71568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/themes/apptek/assets/js/apptek-app.js?ver=1698209889
188.114.96.1200 OK 15 kB URL GET HTTP/3 uniifyapp.com/wp-content/themes/apptek/assets/js/apptek-app.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (385)
Hash 7cf65cd7764edd82badd2c08982e7380
950e53a634c5d8419c0cea76b5a18bb115f69bc7
0b9c06d7c697ff088475c827db1be01bc262c35ad84caff6dcc462ae378b2b44
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/apptek/assets/js/apptek-app.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Fri, 28 Oct 2022 12:23:17 GMT
etag: W/"5a1b52-3b68-5ec17528e1740-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1pMaJcfXi6S6sFXm2OzItFP9X9uytH2GLkRyaNe71b1FNWvRp%2FJiVtcmHbEgQtFn5YLXfwi7HJgni47wiR7twZCv324oJPEoGkC%2FMeHSTt653mhE8xizQwE1Fg0SThVk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2060dac568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6532b9314ab/css/min-widget.css
172.67.38.66200 OK 25 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6532b9314ab/css/min-widget.css
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (24751), with no line terminators
Hash d4f9ad34fae3ba64cbc48057dc47e968
f8d0d55dc6e9b5d53f74b0b8bfc5e2edbdb0618d
2b5b9f68ace12b789b1371204754547021dcbf3e9df630e7e22b49ee56e05b8c
GET /_s/v4/app/6532b9314ab/css/min-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:15 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=24831
access-control-allow-origin: *
etag: W/"5742a34aaab2a5983c7c11cdeef1c0ee"
last-modified: Fri, 20 Oct 2023 17:31:42 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 386131
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e2293e11b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-includes/css/dist/block-library/style.min.css?ver=0621ff1d1a7a69c31fa9c0bd192756a5
188.114.96.1200 OK 104 kB URL GET HTTP/3 uniifyapp.com/wp-includes/css/dist/block-library/style.min.css?ver=0621ff1d1a7a69c31fa9c0bd192756a5
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
Size 104 kB (104484 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/css/dist/block-library/style.min.css?ver=0621ff1d1a7a69c31fa9c0bd192756a5 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: text/css
last-modified: Wed, 19 Jul 2023 11:13:55 GMT
etag: W/"40359a-19824-600d5209602c0-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AmFE87xmBuQptBqpNt3Oq7%2BLsChDAnEJdPKsUPPMAWotWClccOBoTKSFLV%2BG9boM8lcIHFGFMz1hSBxFb7TEtBpyq7T0Ciq9uuTE6Wtyv4wh0esLEeV%2BsNX10KXuUIlo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20cd90d568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/elementor/css/post-35633.css?ver=1695054608
188.114.96.1200 OK 14 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/elementor/css/post-35633.css?ver=1695054608
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (14113), with no line terminators
Hash f699f2db3864c2d63fdc0335b55358c2
c1c3695c4094a2af315a665b030ff34694c08474
e259498d10a5ac7295328030afcc0b471df78556c1d31ebece6a4d52e9720c53
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/elementor/css/post-35633.css?ver=1695054608 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 16:30:08 GMT
etag: W/"5a0015-3721-605a4a7d7f39c-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AbOiro5MoowCJz2JfkzqBDThpqsOOZTQBEuLQQNvuYe6TuYwpaaornBtU%2BPqQCYgSYeYMqNuUplZDtSoCrNCp5%2BTU6UTEIiM5se0O5E%2BqC9xX1gMqB6lff6X%2FVdqJrn2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20c88e2568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/plusjakartasans/v8/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yw.woff2
216.58.207.227200 OK 27 kB URL GET HTTP/2 fonts.gstatic.com/s/plusjakartasans/v8/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yw.woff2
IP 216.58.207.227:443
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 27444, version 1.0\012- data
Hash 13d1b429e99059f97e58fa10dd69f8b5
174c7f299158103127d50de82f1086c3b66e8258
1262bff0591c36094d058ab102b84ce34eb1e547e8ff00557bf8d55449e58e40
GET /s/plusjakartasans/v8/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27444
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Oct 2023 04:57:27 GMT
expires: Fri, 18 Oct 2024 04:57:27 GMT
cache-control: public, max-age=31536000
age: 518447
last-modified: Thu, 22 Jun 2023 14:14:33 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
uniifyapp.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.min.js?ver=1.12.5
188.114.96.1200 OK 52 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.min.js?ver=1.12.5
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (51925), with no line terminators
Hash 956116be8a6bbfe31146567de3163e3c
ed72b0ffd3de1cb7eee98542dbe1a45e05b1f9ee
9f81abea871019cc5b59148fa03b55628735b98b1f2dbc7b02560f60529944ee
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.min.js?ver=1.12.5 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:27:25 GMT
etag: W/"421a4b-cad5-605a49e1d01ff-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hr5DUYgmBVGqxcI6GSBUXoKT8Tk%2FjB%2FTrLK8p8qvZr6ce%2FsLoahUmkuyZMlyQ%2FCYLodGTX51BFo984sYxE%2F%2BqApqyJZae4FuEPqwKkplXgpG5A8%2Bk%2B26sVn7Ojp1RT7J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205dd79568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=2e29137590434abf5fbe
188.114.96.1200 OK 2.4 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=2e29137590434abf5fbe
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (2489), with no line terminators
Hash e23c9de5432b52f6d744cd061b122e67
496b4a6d904fdf54b22c11f3ba02e4f0f92aae63
f379cbbbc572b34069563871f8b2db374e518ac28ea7c9e1c5562fec96d013d9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=2e29137590434abf5fbe HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:27:39 GMT
etag: W/"48021f-96f-605a49ef0ba60-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ScD826ho97DqrU0YYw3%2F7SgthICGQlygtKD3lM4ueAupEYWM57Rzshq2nJB5FzLVOQzER4oXoGFjidma0s65nq%2FzpKN5FkPJ%2FXgkMfTXJWQP1JIZojfOCQIgs8z99kRv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2061db9568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6
188.114.96.1200 OK 13 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (12876), with no line terminators
Hash bcad7781b3e74db2565b8424c45232cd
41b0d94434ef667897c06e1184b703064ffceda1
d622534d53d3ac1095af275f0b30274fcd835785577df2dde6d9398e6f7a2c8f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 16:27:08 GMT
etag: W/"400c95-324c-605a49d16a867-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ge4BlUbQ%2FyyGA5m9sYNgujgwJKtVm4bk2KWm6ShdjUvpxrqIWHAqFYEo%2FDlmY7%2FMuUPD7sKVFrqb2zVUaT6%2Bcbx5hAiAhWfLkIfkmP%2FJDyK7%2FYUgvei%2BdhVwVmYgftSv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20ca8f5568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/elementor/assets/css/modules/lazyload/frontend.min.css?ver=3.16.3
188.114.96.1200 OK 413 B URL GET HTTP/3 uniifyapp.com/wp-content/plugins/elementor/assets/css/modules/lazyload/frontend.min.css?ver=3.16.3
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (413), with no line terminators
Hash cb17d4e4c3fd00800b0f561b8a057149
638201b94e04bd2082788a774dde22696ad7402e
5ecb54f91384af7226cb4f18f87588edd49ceff5bdd4a3010336e1c22ccc390d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/elementor/assets/css/modules/lazyload/frontend.min.css?ver=3.16.3 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 16:27:05 GMT
etag: W/"3e2e48-19d-605a49cebcf6b-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yVpXo1VtD0Z4cLEPedJpBrhLV%2FJjtPOgdoA9dC1Lds5V6YjYJoMl8h1MrHW3h8VggSHiXzO%2FezjTdlOLtsBXt10gvM0b7h9mhUyicMZ2grb%2Fk%2B2oUmOakBBMsE9ldXD3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20ce929568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/elementor/assets/js/image-carousel.4455c6362492d9067512.bundle.min.js
188.114.96.1200 OK 432 B URL GET HTTP/3 uniifyapp.com/wp-content/plugins/elementor/assets/js/image-carousel.4455c6362492d9067512.bundle.min.js
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (439), with no line terminators
Hash ce38dc0dfc9f6796277bcca070a9aa83
fbb3e43e3259020c2b28ef1f57a8f60e20d09490
04a8cd4c6596d0a65bf7d9616d2ff6ba9ad8386c6fccd7cff5ccb0ac70cbd340
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/elementor/assets/js/image-carousel.4455c6362492d9067512.bundle.min.js HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0; po_visitor=WHPGavoFw9Th
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:13 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:27:07 GMT
etag: W/"3e2f1e-1b0-605a49d043d75-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GZaAtfDGEdawNRBsqDA63gLvPnWxhf8rZtiOAzgx0J3LvRYVgD9Pgs5awYPSrK4xAFvnXihlqQ4DR1tgm%2FdzY8gPhdhfrmh5N4Fw6zSyCanHFPHEDGjdWkrnZUNqAB%2FT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e218e965568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-vendor.js
172.67.38.66200 OK 83 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-vendor.js
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_s/v4/app/6532b9314ab/js/twk-vendor.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Oct 2023 04:58:14 GMT
content-type: application/javascript
last-modified: Fri, 20 Oct 2023 17:31:43 GMT
etag: W/"ce3014b09c6dfbd6f92bc585fd840580"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e220381156ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-chunk-vendors.js
172.67.38.66200 OK 217 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-chunk-vendors.js
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Size 217 kB (216688 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_s/v4/app/6532b9314ab/js/twk-chunk-vendors.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Oct 2023 04:58:14 GMT
content-type: application/javascript
last-modified: Fri, 20 Oct 2023 17:31:43 GMT
etag: W/"fae54e1e4dc142b40d1697be1f5cc93f"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e220481256ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
uniifyapp.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.min.css?ver=1.12.5
188.114.96.1200 OK 122 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.min.css?ver=1.12.5
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 122 kB (122127 bytes)
Hash e3339f9b8a2155a9e6ccb8eb482e99a8
4aa1c98885465c265e1665e76962d4ccbc64d77b
ffc19b19308a1335b8ff8e7b77d0bd596aecd9021e6aafc570ccaab50aa651c8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/css/eae.min.css?ver=1.12.5 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 16:27:25 GMT
etag: W/"400fd6-1dd0f-605a49e1ce2bf-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c%2BROo30vqp%2BV%2BomfOqC9SE5vqER4e9o8R0%2Bz%2Fxx10hJkbTmHIU7bmuf4JahWlCDa6gmTTxL3%2FKZVvA3sGWMM3VqkONrXilmjx3Cl8OLX3xUoYcbJTg5NPm%2FWiUpvumlA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20ca8f2568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
va.tawk.to/v1/session/start
172.67.38.66200 OK 0 B URL OPTIONS HTTP/3 va.tawk.to/v1/session/start
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/session/start HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://uniifyapp.com/
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:15 GMT
x-served-by: visitor-application-preemptive-x4d1
access-control-allow-origin: https://uniifyapp.com
access-control-allow-credentials: true
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e22419565691-OSL
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/assets/images/attention-grabbers/51-r-br.svg
172.67.38.66200 OK 3.1 kB URL GET HTTP/3 embed.tawk.to/_s/v4/assets/images/attention-grabbers/51-r-br.svg
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3132), with no line terminators
Hash 1e91730b6a5b4beaae74262c11c8637e
e875bff7d9888be27719ccee201ae7ecb4e9c67b
91993108e9d0b01f325e7a1166b67921c49555a15c6bdafaa1c10f23f7b8e164
GET /_s/v4/assets/images/attention-grabbers/51-r-br.svg HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:15 GMT
content-type: image/svg+xml
last-modified: Sat, 22 May 2021 07:25:15 GMT
etag: W/"d316fd3fed8bee736394c9f9c02b3b03"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: MISS
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 2056687
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e2294e14b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/themes/apptek/assets/js/menu-vendor.js?ver=1698209889
188.114.96.1200 OK 262 kB URL GET HTTP/3 uniifyapp.com/wp-content/themes/apptek/assets/js/menu-vendor.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 262 kB (261657 bytes)
Hash c5bcfef25b470a226d94163a59d8cb80
318d28b832d03791f8d80758ce5565a8164c4d24
39594e1b177575e2de17bbac225fe00ad3d23a256891c0fc682c3100dfa3fbbd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/apptek/assets/js/menu-vendor.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 10:46:20 GMT
etag: W/"5a1b5e-3fe19-5eb4ccd6bf700-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l9g%2Bpq15%2F1Ebh33A6%2FxyRuyEB%2F5FhpyMEH9drnI5AC8W3WUq%2FV2TmViv2nWpazeuXqYhaylqT43wE3DxFQAPQ9fXxl9GhBko6vNmbcFLDR3b%2FcUP7ABszWOiUx25kpAF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205fda4568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/themes/apptek/style.css?ver=1.0.0
188.114.96.1200 OK 1.4 kB URL GET HTTP/3 uniifyapp.com/wp-content/themes/apptek/style.css?ver=1.0.0
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1430), with no line terminators
Hash 6e63a600f55c83389b8c1269ac8bff97
13d22391e2f9041f85fe7fa4a2775ac8d3002ec8
28fbec3e482fc72608d64e688b95fe7c63922fd9405e29b3bd21dfc6cd09075b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/apptek/style.css?ver=1.0.0 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Tue, 24 Jan 2023 19:14:53 GMT
etag: W/"5a1af3-577-5f307549ecd7a-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z9EUmSl8p%2FgKxZsq4%2FFrDABg4KP86exOOd8Hy08xXVbksr%2FPm03imWgxUq%2F329oyLsLbrwQRfCaOkVEJktGCTcrKncG%2F8VBvY7Y2pIp%2FYENchAbKzpDjU1sbUpKWQIgD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20c88e7568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-chunk-2d0b383d.js
172.67.38.66200 OK 699 B URL GET HTTP/3 embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-chunk-2d0b383d.js
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (725), with no line terminators
Hash 7c2c957f3cf80dadfd0cbb7c677a0869
30e8962bf64cc7349c9e61b40b8bab5aa598c63c
606127d882e34faee4895ad2cbf8a94d805fac37792c2cc2b9bc05ca3de743b1
GET /_s/v4/app/6532b9314ab/js/twk-chunk-2d0b383d.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:15 GMT
content-type: application/javascript
last-modified: Fri, 20 Oct 2023 17:31:43 GMT
etag: W/"838903127a65ec440893b4945c40ca4a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 386132
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e2285d92b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6532b9314ab/css/message-preview.css
172.67.38.66200 OK 38 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6532b9314ab/css/message-preview.css
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (38227), with no line terminators
Hash e19649315a1ba9a5b420e751ee053b6e
5c6f3f3034efb83d3fd20f1aeb2b04a22b826512
98f3004edce9989eb1410055c57772a2be9c7810ab5811261fff0487cd4645b4
GET /_s/v4/app/6532b9314ab/css/message-preview.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:15 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=38360
access-control-allow-origin: *
etag: W/"03fb642386334234f457befc22111bea"
last-modified: Fri, 20 Oct 2023 17:31:42 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 386131
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e2294e12b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.16.3
188.114.96.1200 OK 40 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.16.3
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (40396)
Hash e2a3fb1470104bd64d98e8245c6de817
0845f9f5eeda970595c9d3f22c5e104c9c761960
b9e240e7c455e9415ddcebc9ebd5c1b37350abef90c0a7d7b6a57423850250f7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.16.3 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:27:06 GMT
etag: W/"3e2f19-9df4-605a49cfe4615-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GXX6hSDENy7GirroO00t4TyizGP0l9nvPdBF3VpNszOSuHtJB8LnvUm36GiHSZ28dJD7Rzf0oQu8vlSYebhqCwgoIho2s79I%2FbvPZK9yAg%2F3uEJ5Fh0TGBj3H3OBMR%2BE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2064ddf568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.min.css?ver=2.4.0
188.114.96.1200 OK 9.5 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.min.css?ver=2.4.0
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (9505), with no line terminators
Hash 2000f454e7edf939bcd91af908d5d480
dd9d72c8063656da91e30954191a1b7b58277a8c
6578aea6a06c0402715d2207e08e0c69d886dcaca2bd91d5b3c45445618f164d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.min.css?ver=2.4.0 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 16:27:25 GMT
etag: W/"4415cb-251f-605a49e1d38af-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WOcyOraxSe%2B9Om466TKb%2ByRqPZTr%2F1fJvdqu89qh0N3Odj9HXr9DsGqcCPkC%2BPIRmawDUeFCbYM1PHWC4ezzF6nW%2FWSfHhI%2FbsSTiS0CUjnJLlvrXpl38lrWxkvyW7kc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20c78d3568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0
188.114.96.1200 OK 59 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (59158)
Hash 74bab4578692993514e7f882cc15c218
b6293bcfd851f963edbe859498570c4c0c7eaae4
d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.0 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 16:27:08 GMT
etag: W/"400c44-e7d0-605a49d107e3f-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yTgptchTo0%2FLIGg%2FjDu6q6hjLU3qT9jgSL%2FjvvJ60XOSZLHZ%2Bv6jBUsOQ1mVphYIDxQ%2B%2F%2FUYfKR8FKlDytqkRydjSzLgAoCzoQZG%2F%2By7EmjPJf%2BGhWU6DjihvlczzEM7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20cb8f8568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-runtime.js
172.67.38.66200 OK 2.3 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-runtime.js
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2349), with no line terminators
Hash d0f10b07016b23a3232249f7e0c306a1
306ea7d120b46f6452ea3d0eaf5efdeca5ec97cc
7a8ccacdb0a4df591f8a2eaeddb4b2fe7c07ed01208af53f824973e696bb9622
GET /_s/v4/app/6532b9314ab/js/twk-runtime.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Oct 2023 04:58:14 GMT
content-type: application/javascript
last-modified: Fri, 20 Oct 2023 17:31:43 GMT
etag: W/"ca6e6539369c5e4761970f92cc3b4057"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e220481956ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
uniifyapp.com/wp-content/uploads/2022/11/8.png
188.114.96.1200 OK 3.9 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/2022/11/8.png
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 170 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash dca2afdec94742aa838e5910e2bac0fe
551d4039f120a5508245154ff86e940d4debf2a4
c42feda1688803174d03676a9af8683862e9e4c06fad90c7865e93a7489b58f8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/11/8.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: image/png
content-length: 3856
last-modified: Thu, 10 Nov 2022 13:30:19 GMT
etag: "5a2069-f10-5ed1dc638d0c0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JchHbYElB61STkt9edPnvOZhp8tQMBMfaMaH%2Fv1QVbWH5KWuH2HrmM9HRdmdfmh7O%2Fv3lzrJPhSTiQADRchfANf9cBLclqBNfAYsU7zDWEQ6qQ3KnJer%2F0Pnf%2Fv6Rvae"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e213fdb0568b-OSL
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/2022/11/2.png
188.114.96.1200 OK 13 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/2022/11/2.png
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 170 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash f9b4a997475928c03544b4345c1a5376
5127d99379fdd29eca4ebf84e4eeb063f7a585f4
42d01320d47462f7fba02728fe062f5fcf00cdd9c4494b8ad68431d4d027cb14
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/11/2.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:13 GMT
content-type: image/png
content-length: 12657
last-modified: Thu, 10 Nov 2022 13:30:17 GMT
etag: "5a205d-3171-5ed1dc61a4c40"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sJ6TM1dadO6MghFmY8ukOpRllO94PVHhljTWLHHVS9b8LubIRx0ZXgUJgiREaCY8OIHT5CmXI7g1P0gZrkNBwu9SigD0DAgqdOxrWT1jKND6qHZC3lxVRHlo8orXn4Zf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e213fdb3568b-OSL
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/2022/08/smart-app-banner-bg.webp
188.114.96.1404 Not Found 0 B URL GET HTTP/3 uniifyapp.com/wp-content/uploads/2022/08/smart-app-banner-bg.webp
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/08/smart-app-banner-bg.webp HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 25 Oct 2023 04:58:13 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.0.30
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://uniifyapp.com/wp-json/>; rel="https://api.w.org/"
server-timing: wp-load-alloptions-query;dur=1.01, wp-before-template;dur=70.44
vary: Accept-Encoding,User-Agent
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1ZNXuovvWPnHQa4BXV6%2BURiKHea7Iz0JlJRt0xT%2FUCdjEhQ2pqFFmfU8906EGO9MKBRCUF41SD9dIUe3NX9m%2Fnc7J7%2BVIdFrcS8gUKsCKkRf6HENvqSaDBgv7KznMoli"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e214be3d568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
va.tawk.to/v1/widget-settings?propertyId=63b90e9f47425128790c21d7&widgetId=1gm5e28ep&sv=undefined
172.67.38.66200 OK 2.9 kB URL GET HTTP/3 va.tawk.to/v1/widget-settings?propertyId=63b90e9f47425128790c21d7&widgetId=1gm5e28ep&sv=undefined
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (3374), with no line terminators
Hash 861931600715ba954fb5f52cc9584456
87e2856277e8fe9af938e81c9230539fd8d77240
321d6db9684af08ccbea55127855d00c8090ee88f74d50098a47fceda12984be
GET /v1/widget-settings?propertyId=63b90e9f47425128790c21d7&widgetId=1gm5e28ep&sv=undefined HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://uniifyapp.com/
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:15 GMT
content-type: application/json
x-served-by: visitor-application-preemptive-6fk2
access-control-allow-origin: *
access-control-allow-methods: GET,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
cache-control: public, max-age=7200, s-maxage=1800
etag: W/"2-65-0"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e22419545691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/js/modernizr.custom.js?ver=1698209889
188.114.96.1404 Not Found 128 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/js/modernizr.custom.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
Size 128 kB (128442 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/radiantthemes-addons/assets/js/modernizr.custom.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.0.30
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://uniifyapp.com/wp-json/>; rel="https://api.w.org/"
server-timing: wp-load-alloptions-query;dur=1.17, wp-before-template;dur=70.73
vary: Accept-Encoding,User-Agent
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XUQ2iSKF4Xf4HW9v5mD80DLd9nKusEg9FnLTC3K1dNo5KDuI%2Fp8XHi7HUgQPBekoTqOAlMZ%2F8Cv0KyM8es7CL7z3MiWrfIuViHlEjOB%2F%2B00pKMk6TFpXFUVWDNq7gxS9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20efa60568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-json/contact-form-7/v1/contact-forms/43045/feedback/schema
188.114.96.1200 OK 222 B URL GET HTTP/3 uniifyapp.com/wp-json/contact-form-7/v1/contact-forms/43045/feedback/schema
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash dae5fa09dd094dc9444d5a44c1abc5d4
8075243b1002ef87fd88ac98a3f73255c684c0ad
a7323a74aa8ec62c5851b381e88e5acbf4dad956fd20732b217b11baf378f69a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-json/contact-form-7/v1/contact-forms/43045/feedback/schema HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, */*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://uniifyapp.com/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: application/json; charset=UTF-8
x-powered-by: PHP/8.0.30
x-robots-tag: noindex
link: <https://uniifyapp.com/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: GET
vary: Origin,Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OBCddqtifUT7%2FM1DVN5VfE95SRuFT0LUPfUeqt53Z%2FnLg4vdzICWeSRVJIb72n77HrTh3RaILbqNoIX6O%2BHaON9SXreZw1MW77VCU6VJb5llWAwH%2BY0olBpmpO0DNhZr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2127c94568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/themes/apptek/assets/js/fancy-box.js?ver=1698209889
188.114.96.1200 OK 60 kB URL GET HTTP/3 uniifyapp.com/wp-content/themes/apptek/assets/js/fancy-box.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/apptek/assets/js/fancy-box.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 10:46:20 GMT
etag: W/"5a1b59-eb01-5eb4ccd6bf700-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HBU9HoBgn6fAlaNKxraq0FLhY7TL29vC4b9Bp8QK1%2F%2Bt60TYnoA2MIEfG%2FMfw%2FeDxbuhmUCseZRlaMFStAIQjQO%2BnHdBQ7eJ3yww4uSQCHmJ%2BoR1U6TX02qmARuvSszl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2060daf568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.min.js?ver=1.1.0
188.114.96.1200 OK 20 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.min.js?ver=1.1.0
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (19887), with no line terminators
Hash d92d1d8e778aa3773e719bba09089942
ff26dd2b05f2e5993490968d17801d91ad0f9761
7586da6ec5a0e01eb5239aaac31dc3d411cae3090cce52a7e00efbda2f32c6bf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.min.js?ver=1.1.0 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:27:25 GMT
etag: W/"421a68-4daf-605a49e1d30df-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IH34OZfdkHjY92WrQamOlFPUKCGvv%2FMEbkXfl%2BdUmCyoZ857uVvW2LixrUbnUZYg%2FUfeTa0sh5XEIKxvuqbFBHl2G8OXAYwQZ%2F%2BahOk7WbeuNbOLH3IOJm18qwbRCDWF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205ed8a568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/elementor/css/post-7.css?ver=1695054607
188.114.96.1200 OK 1.1 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/elementor/css/post-7.css?ver=1695054607
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (1112), with no line terminators
Hash 6003fe48de837f0370d07df89c64f68c
5049156f0423f6208a7646286878f9be5a6af9b1
e87be2b4257cd9a64672c6623a0c18803d38e77b207929a3a8d5a15f14adfda4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/elementor/css/post-7.css?ver=1695054607 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 16:30:07 GMT
etag: W/"5a000d-450-605a4a7c08b4b-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qpCjKfd0fbYau29PUC6iA9E3RiDgX8FZJmrh1rWXIRg0U%2F6Zr9k4eWR5Vw%2Fw49j0IB2h2MaDQ4sCdzKRQy8dFtW9k%2B6pj4P3%2BuwM1GvPRCFPmuM0gJxsKuOD7%2FJpnl68"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20c78d0568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtag/js?id=G-EB0MPR1JXK&l=dataLayer&cx=c
142.250.74.168200 OK 228 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-EB0MPR1JXK&l=dataLayer&cx=c
IP 142.250.74.168:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint81:B9:A4:E4:E4:84:05:A7:F6:52:4F:E2:74:27:36:05:0D:74:15:89
ValidityThu, 28 Sep 2023 05:26:20 GMT - Thu, 21 Dec 2023 05:26:19 GMT
File type ASCII text, with very long lines (5788)
Size 228 kB (227579 bytes)
Hash 554a702ac00742c79d8b4be81376409f
5615c9dd40d64bcbd3cc802d09b1732cf1c4192f
80ceb408e152b1bf0e8294ac455101e8f982ad36b7f1dd001742b911c8f798ee
GET /gtag/js?id=G-EB0MPR1JXK&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 25 Oct 2023 04:58:11 GMT
expires: Wed, 25 Oct 2023 04:58:11 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80589
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
151.101.129.229200 OK 303 kB URL GET HTTP/2 cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
IP 151.101.129.229:443
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
Size 303 kB (302554 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU"
content-encoding: br
accept-ranges: bytes
date: Wed, 25 Oct 2023 04:58:16 GMT
age: 17632788
x-served-by: cache-fra-eddf8230136-FRA, cache-bma1654-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 41275
X-Firefox-Spdy: h2
api.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=44045558
104.17.201.204200 OK 114 B URL GET HTTP/2 api.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=44045558
IP 104.17.201.204:443
Certificate IssuerCloudflare, Inc.
Subjecthubapi.com
FingerprintB1:3C:6E:B5:33:D1:03:D3:5D:7E:38:F6:29:9B:E5:7B:60:B8:AB:C3
ValidityFri, 07 Apr 2023 00:00:00 GMT - Sat, 06 Apr 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 6bce0186a4abdaf833266f1963b12a7e
d00ce58e0f4fee76e2944e17a5b2c708d08242b6
c9309b77acbe72698e8fc3ce777a953f5757406795735baab9e6fb5230bf9461
GET /hs-script-loader-public/v1/config/pixels-and-events/json?portalId=44045558 HTTP/1.1
Host: api.hubapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: application/json;charset=utf-8
cf-ray: 81b7e212dadeb51e-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: https://uniifyapp.com
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: origin, Accept-Encoding
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-max-age: 180
x-content-type-options: nosniff
x-envoy-upstream-service-time: 11
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-served-by-pod: iad02/hubapi-td/envoy-proxy-5b5c96c966-q79d5
x-evy-trace-virtual-host: all
x-hubspot-correlation-id: 97013172-462f-486f-9ffb-311e88855aa3
x-request-id: 97013172-462f-486f-9ffb-311e88855aa3
x-trace: 2BD66CFE8F46A89966387E85A7A3E5AD797A37BC63000000000000000000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OQsETNsf6bXHPqZVC6jAqQOZ2h6VU2%2B5i4f%2Fiw%2FLktKi4WFdpYsgvGbe5WEgDNTdi0llDyzMa1KwonS60EMc1j6iXIHQCnir2iP6VacgSoc6M%2F2%2Bk8oMA8qfSLmBVGIn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-2.woff2?55755728=
172.67.38.66200 OK 10 kB URL GET HTTP/3 embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-2.woff2?55755728=
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 10520, version 1.0\012- data
Hash 054b3b66812d0a4b87ffc6776f0a42f1
683eb11f2439b9edc3290899fb47806166b5182e
f4d4fcb3cdd9f021bca50bedb83de05b77fd23b3c98ad36b103fea8c0744ea71
GET /_s/v4/assets/fonts/tawk-font-icon-2.woff2?55755728= HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://embed.tawk.to/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:16 GMT
content-type: font/woff2
content-length: 10520
last-modified: Sat, 22 May 2021 07:25:13 GMT
etag: "054b3b66812d0a4b87ffc6776f0a42f1"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e2296c105691-OSL
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8
188.114.96.1200 OK 11 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (10770), with no line terminators
Hash 6ce86c3105139cb3c80913e6a3696a96
c55c7be10b31a773c7c9f6f393f382b89c318db4
5fe46d2da01452067736578431f6c6e8116a24e616f58c72d9d81fdb2c7c9569
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:26:34 GMT
etag: W/"3e2d4d-2a12-605a49b0e4e86-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3dfgNg7VJtbseutiyz34kU2%2FzNJtyOG6sbTJoHWHZgJB5w6AXVQt6xYAFEJ81%2FSsqKAyO9oHEQXTqsZn8faIJ05YHJ2penhSNtg10y%2FwmuVDEdErgMUPBiO3C9JCT3Mk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205ed8f568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8
188.114.96.1200 OK 13 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type HTML document, ASCII text, with very long lines (12943), with no line terminators
Hash 5bc2b1fa970f9cecb3c30c0c92c98271
7c6bb87aaa24714b7b3b3c86dd932736a80270a9
1060091178cbd6c843b802f516f230f1a3a1e85f1afbd6ef84d80e5430ba457e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:26:34 GMT
etag: W/"3e2d35-328f-605a49b0e3afd-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XAC4Hwst4lZyHHGphNFN%2FYMYmV7JZnVQ%2FcE1uiadgJjxB5L7W%2BP7LWBhAoxGN6yaZxk2CryGLch3SzWqmPcyyhdrxYlCIYJEG5hafYInQvRBCu4cNhIMt3KhWr%2BtzI0J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205ed92568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/themes/apptek/assets/css/header-menu.css?ver=1.0.0
188.114.96.1200 OK 200 kB URL GET HTTP/3 uniifyapp.com/wp-content/themes/apptek/assets/css/header-menu.css?ver=1.0.0
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
Size 200 kB (199910 bytes)
Hash 0b557f5e2b9c27a2de74bfc45e37fba4
363d20792f90c804a5807a345045b66d4bf96778
0103c201b625a01c6ee4064d3fcfa2125bcec4846fe975ff9e1cbe7ded354e6c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/apptek/assets/css/header-menu.css?ver=1.0.0 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Mon, 14 Nov 2022 13:12:11 GMT
etag: W/"5a1afd-30ce6-5ed6dfcbcc0c0-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PoepKDKlpMKkGKahvDKYPLAlFcLI2uRtR9tOq3Qa07zjIU8X%2B2%2F6AgA%2FgTco5XEJuAaz%2FEJ0N8q5caErNdqGw6wcxI%2BevmnZvqPHhzAmZC%2BxGcTWc43XJNPU2%2FXYZf%2Fb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20cb8fb568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/js/modernizr.custom.js?ver=1698209889
188.114.96.1404 Not Found 128 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/js/modernizr.custom.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
Size 128 kB (128442 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/radiantthemes-addons/assets/js/modernizr.custom.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.0.30
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://uniifyapp.com/wp-json/>; rel="https://api.w.org/"
server-timing: wp-load-alloptions-query;dur=1.84, wp-before-template;dur=70.35
vary: Accept-Encoding,User-Agent
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H6UM7rOz15g1l1a68jCHW0mmetFitLelotbwTT%2FumTPvgZUDPec8Og1hwnMpSCD4gS6uFiH8qA1hzfJZAPAnRkeFFSgWlbR7StUPpS4O7hZGimtMVZqGfKNoXhqVyzDB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2061dba568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/js/testimonial.js?ver=1698209889
188.114.96.1200 OK 10 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/js/testimonial.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
Hash e2c6242c0612a5de6ac11e9672d3a636
587ed68b5bd63c3511b3eb98b4b9458c62a8362e
3abcb1a1e9055ae1dc1bb23ce1570574d0d2f6372056404c1373ab2df3622d1e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/radiantthemes-addons/assets/js/testimonial.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Tue, 08 Nov 2022 06:10:07 GMT
etag: W/"5a0998-28d4-5ecef6442edc0-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bd6G%2BbjH5qXD%2FZ4f8G7%2FS%2F7wFY%2F6NB2scT0E07EJLZNHTspn2XZ9LXlojIIFuPqOkYmVaGe4FSkxpuDm1newznnJCiIT6f7KB4HpigMwFokVql4xiILaSbykkqxCAeVv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2061dc4568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/elementor/thumbs/google-play-badge-2-pzo4n6p1o73068e5sni77w2fevob8o3pol0narpj40.png
188.114.96.1200 OK 15 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/elementor/thumbs/google-play-badge-2-pzo4n6p1o73068e5sni77w2fevob8o3pol0narpj40.png
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 300 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 0e0fe9bda0ae29ecd0360ae2f3fb06bb
a3d0162048fbd4c34a5a63cfb45323128df50055
68959d78aea05ea86d49730b556c18ca32477b70142bc74eb09f86bd4072ea73
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/elementor/thumbs/google-play-badge-2-pzo4n6p1o73068e5sni77w2fevob8o3pol0narpj40.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: image/png
content-length: 14813
last-modified: Fri, 30 Dec 2022 18:09:05 GMT
etag: "5a23e9-39dd-5f10f7f3c1240"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jtFAQMc0or64YKRZkrbFGtwGT9RRY1PzeT9cVfaDQ0G8HRzkJRUmHa1UIv8PiXDCaI4nCvKC40UqWhmbMHYvEeu6HYIn7pNG%2F8P%2FYhwtGABySKiKIB2nFwrS%2FTIrfvqd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e213bd62568b-OSL
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/js/carousel.min.js?ver=1698209889
188.114.96.1200 OK 54 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/js/carousel.min.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (933)
Hash 0b991a4e1dd356f931be86f323203ff0
663772820fc3f1d8da6a1ab59dca0312a3657f82
041df1d9efdace731a6b5956473567232e14be126d0bc80a2c1b49a706211ab1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/radiantthemes-addons/assets/js/carousel.min.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Tue, 08 Nov 2022 06:10:07 GMT
etag: W/"5a0967-d21f-5ecef6442edc0-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XsCnIuAOtcKA84vYkkqq7gTXTrMXA5d6Oy1VyMtvvYDXAdbVULrczndq1FWXhPIfgl5n7jHbIsqCX5B%2BWk1eZ5rOk4xrAGSnyA6%2FLOPxoo9%2FPc%2FU%2B75smoArcJvgdT6E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2062dc5568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CABeeZee%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CActor%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.3.2
142.250.74.106200 OK 47 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CABeeZee%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CActor%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.3.2
IP 142.250.74.106:443
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint28:23:2B:8B:2D:09:6C:BB:06:7A:35:80:95:BB:F8:03:41:C8:99:2C
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
Hash 01b3077919938a45666c9fb10dd47215
1239b22ca35784f1c8c693fba51a3ba5120f90a1
ac7f1f9b611170b49036e4310ecbc0b5ca6648bc06db21e20f73f6e2e365465b
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CABeeZee%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CActor%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.3.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 25 Oct 2023 04:58:13 GMT
date: Wed, 25 Oct 2023 04:58:13 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/6532b9314ab/languages/en.js
172.67.38.66200 OK 17 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6532b9314ab/languages/en.js
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with CRLF, LF line terminators
Hash 585ba00b2c167b90c210161454f843b5
89ee8372cc6d5eb307cf5840b70d8f3dab3c57f2
e924ffe8bcc65483510a22a7286bd6d4d204e72ffe5927eec50158f7a7be50c0
GET /_s/v4/app/6532b9314ab/languages/en.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:15 GMT
content-type: application/javascript
last-modified: Fri, 20 Oct 2023 17:31:43 GMT
etag: W/"585ba00b2c167b90c210161454f843b5"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 386137
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e227fd56b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.pushowl.com/latest/sdks/pushowl-sib.js?plugin=wordpress&environment=production&platform=sendinblue&id=160421&name=Uniify&subdomain=uniifyapp.com&logo=https%3A%2F%2Fimg.mailinblue.com%2F3929435%2Fimages%2Fcontent_library%2Foriginal%2F63fca337dd35c87c8e6f3f5d.png&guid=fa94175ece16e569a28db2d6a982f5a2&default=true&visitor_id=92ab3b5b-191f-409a-8935-d33df55751fc
54.230.111.103200 OK 171 kB URL GET HTTP/2 cdn.pushowl.com/latest/sdks/pushowl-sib.js?plugin=wordpress&environment=production&platform=sendinblue&id=160421&name=Uniify&subdomain=uniifyapp.com&logo=https%3A%2F%2Fimg.mailinblue.com%2F3929435%2Fimages%2Fcontent_library%2Foriginal%2F63fca337dd35c87c8e6f3f5d.png&guid=fa94175ece16e569a28db2d6a982f5a2&default=true&visitor_id=92ab3b5b-191f-409a-8935-d33df55751fc
IP 54.230.111.103:443
Certificate IssuerLet's Encrypt
Subjectik.imagekit.io
FingerprintF0:0B:23:AD:1E:B6:59:34:A4:A8:99:50:76:14:CD:DB:73:BD:0D:96
ValidityWed, 18 Oct 2023 15:17:22 GMT - Tue, 16 Jan 2024 15:17:21 GMT
Size 171 kB (171323 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /latest/sdks/pushowl-sib.js?plugin=wordpress&environment=production&platform=sendinblue&id=160421&name=Uniify&subdomain=uniifyapp.com&logo=https%3A%2F%2Fimg.mailinblue.com%2F3929435%2Fimages%2Fcontent_library%2Foriginal%2F63fca337dd35c87c8e6f3f5d.png&guid=fa94175ece16e569a28db2d6a982f5a2&default=true&visitor_id=92ab3b5b-191f-409a-8935-d33df55751fc HTTP/1.1
Host: cdn.pushowl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: *
timing-allow-origin: *
x-server: ImageKit.io
x-request-id: 8ee5cb22-35cd-4771-a909-d61047e1903a
server-timing: download;dur=38
cache-control: max-age=31536000
etag: W/"d5fcc3db488d2434035275cef520f584"
last-modified: Thu, 19 Oct 2023 15:29:15 GMT
date: Wed, 25 Oct 2023 04:58:12 GMT
content-encoding: br
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: TO7ufDFiiIr_z8bwlXzbeTBphrz_vUYs3PPfSby0rxbma44eQHWlrw==
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-chunk-2c78ba82.js
172.67.38.66200 OK 7.9 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-chunk-2c78ba82.js
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (8581), with no line terminators
Hash 59f8d05fdb7ddb3023e8785ac853c2d9
09a5eac9ea6ccadddfc3eb7491b2f7b06519dae1
54c557317801cb3e9e124a68566cc2647b4a3cee46041ad9704e02bde880608c
GET /_s/v4/app/6532b9314ab/js/twk-chunk-2c78ba82.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:15 GMT
content-type: application/javascript
last-modified: Fri, 20 Oct 2023 17:31:43 GMT
etag: W/"ba36dd9558122cc9c32bc1958119e924"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 386132
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e2284d87b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js
188.114.96.1200 OK 1.4 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (1391), with no line terminators
Hash 4fc487025aec8bd5c819eabeda9b5472
b8c29ab551926b2fd4a7d88ceb4f29db5d52489e
20750aa1dd3c1a9b73240bd67052e8920a19a31021461325264142c3218762cb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0; po_visitor=WHPGavoFw9Th
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:13 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:27:07 GMT
etag: W/"3e2f7d-550-605a49d0a5fce-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TENAujchY7XO5cNz%2BwLnTxGAqRm383dmc57K9E0tvf36rKZfAoxWXvxVDaZRSvwQLQu9ao4lo08Wj3W%2F6ZDGZKhwyWrIOcAmJ60QAiX4JJPh9zp1yu%2BbdC9LKvolDkGN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e219f9ea568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1
104.18.160.125200 OK 35 B URL GET HTTP/1.1 forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1
IP 104.18.160.125:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1E:9D:91:27:86:63:DC:7B:9D:15:4E:99:31:FC:AA:1D:DC:9E:06:3B
ValidityThu, 18 May 2023 00:00:00 GMT - Fri, 17 May 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1
Host: forms.hsforms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 25 Oct 2023 04:58:13 GMT
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
X-Trace: 2B14259A3F7579DF78F7ABD118A76AF7D96B0921CF000000000000000000
Cache-Control: max-age=0, no-cache, no-store
Vary: origin
Access-Control-Allow-Credentials: false
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-Origin-Hublet
X-Robots-Tag: none
x-envoy-upstream-service-time: 5
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-79986f96f-97dlb
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
X-HubSpot-Correlation-Id: a0b7359c-8b4f-4e86-aba8-c71828387c96
x-request-id: a0b7359c-8b4f-4e86-aba8-c71828387c96
CF-Cache-Status: DYNAMIC
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Server: cloudflare
CF-RAY: 81b7e21b98e41c02-OSL
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-chunk-696bc286.js
172.67.38.66200 OK 18 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-chunk-696bc286.js
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (1000), with no line terminators
Hash 03be8a8dd0c2ea19054e29eef3e0f4dd
4713059a0f0620bf29e3d18b39bb68de67f93dba
9c5ad9980271a114c858d1888a0226508fd8268062b4e6560058e5d5ad5ea6e2
GET /_s/v4/app/6532b9314ab/js/twk-chunk-696bc286.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:15 GMT
content-type: application/javascript
last-modified: Fri, 20 Oct 2023 17:31:43 GMT
etag: W/"24dbc1792e9838a485a2b96db59ebdc5"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 386132
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e2285d8fb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
188.114.96.1200 OK 14 kB URL GET HTTP/3 uniifyapp.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (13479)
Hash 9ffeb32e2d9efbf8f70caabded242267
3ad0c10e501ac2a9bfa18f9cd7e700219b378738
5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Fri, 09 Jun 2023 05:49:24 GMT
etag: W/"54373a-3509-5fdabee5f2100-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XxgKBPDlC275SBe8YN5gVB61BvfCQ4TnQmdl8J9iYL9eQ9%2F27WmUnYKYkRyeA2L85445Wtlnea4MNymNAqk8GcqBIBaHUVBMMZU009Eg6e8i9AiKlohkJ8aqqyZmsnFL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205dd72568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/themes/apptek/assets/js/sweetalert.min.js?ver=1698209889
188.114.96.1200 OK 41 kB URL GET HTTP/3 uniifyapp.com/wp-content/themes/apptek/assets/js/sweetalert.min.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (40808), with no line terminators
Hash f3b8ce97ff6ce324da6232da353adf40
2a3daabc70232c6350ab48d32605dc4a6ac1f1fa
2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/apptek/assets/js/sweetalert.min.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 10:46:20 GMT
etag: W/"5a1b64-9f68-5eb4ccd6bf700-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mw22GAcpzdFwXWKrCYTM9n9JMw7NSNF5YnLnICFkFXCSQYXSBDb78pnyHdZqLTiIjnFM1MH4BTZIFfi1mgZNrkqwF%2FaSqMOy%2BQB%2BzUh2SD8l2DcupTdZCYnov2KfCKNP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2061db2568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/images/left-arrow-img.svg
188.114.96.1200 OK 594 B URL GET HTTP/3 uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/images/left-arrow-img.svg
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (632), with no line terminators
Hash d93516506647cfb20ad4220c107845e2
e887d8c1d2dcedab85bd2794491bb832675abe3b
b34585856241e13635e015e89c554cd05dfcad84664c3a8c5d24083b7d0a94e7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/radiantthemes-addons/assets/images/left-arrow-img.svg HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/css/rt-testimonial.css?ver=1698209889
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:13 GMT
content-type: image/svg+xml
last-modified: Tue, 08 Nov 2022 06:10:07 GMT
etag: W/"5a0490-252-5ecef6442edc0-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DZN1GcmpxB47j8vzvUNcjDzi1rqoiZkGbBXFHJivruBlEpLhUe%2BXRcC3s1czyXMF8jInB31Fn6rykkaf2%2BJhftOL60CBnku5sLOPN6tDP4Bqu7IyHrjcP5RXsFcYlLZ%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2141dc3568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.min.js?ver=2.0.0
188.114.96.1200 OK 23 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.min.js?ver=2.0.0
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (22686), with no line terminators
Hash c9898f4218ad8a464141550c2ec72225
592a3ac90f7cafbc30082584b5e132365bd48f23
71a49270bfb8077f783c2530b1c5bf2335a100a2419996d2f7d1c2ac19dd6239
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.min.js?ver=2.0.0 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:27:25 GMT
etag: W/"421a5b-589e-605a49e1d05e7-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6FwoO4G9W0FaVMcDXvCr2GJ%2BZyFqGqI3FDWOjz9nqKqG4eoJ1NDRJf68bGzuPqqrpewjucgOtOuF8onB48GOrysNMPWCuuNNT55oQNoEB2yrwqTukLMDhtCIBmDpB%2BNI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205ed86568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
js.hscollectedforms.net/collectedforms.js
104.17.90.154200 OK 70 kB URL GET HTTP/2 js.hscollectedforms.net/collectedforms.js
IP 104.17.90.154:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA5:D1:D2:E1:EA:8D:D7:F7:79:F2:ED:55:66:75:F5:52:07:A7:F4:B3
ValiditySat, 29 Apr 2023 00:00:00 GMT - Sun, 28 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collectedforms.js HTTP/1.1
Host: js.hscollectedforms.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Mon, 23 Oct 2023 13:11:34 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: XYPPFvciWFKtpS2hNgrEqmNT6fxOdL.H
etag: W/"7864f8fd485be672e98358eb894b6fd7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c0b0d7167cc2eb52d8d154aa7fc03a0a.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: nQh4LqBuobL9dA-3v1uTZ0KF2AqqUdSp43iHnhjoodHRXdjPriKD9Q==
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=collected-forms-embed-js/static-1.433/bundles/project.js&cfRay=81b7e20eed7956c5-ARN
cache-control: s-maxage=600, max-age=300
x-hs-target-asset: collected-forms-embed-js/static-1.433/bundles/project.js
x-content-type-options: nosniff
access-control-allow-origin: *
x-hs-cache-status: HIT
x-envoy-upstream-service-time: 3
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-7c89bb96b9-s4jft
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-hubspot-correlation-id: b82ec1ef-e035-482d-bb1b-ae57d6175a39
x-request-id: b82ec1ef-e035-482d-bb1b-ae57d6175a39
cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prod
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 81b7e20eed7956c5-OSL
content-encoding: br
X-Firefox-Spdy: h2
uniifyapp.com/wp-content/uploads/2022/11/4.png
188.114.96.1200 OK 2.6 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/2022/11/4.png
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type PNG image data, 170 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash d8f16e07917173149a9bd0a064bb5f37
faffd20273507daa05ec07a447bc3e314be904f2
2933b32e0aa7d88e8a93a55abadcf7e0e68ed4e2c90713e87072a369c6d659d7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2022/11/4.png HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i; sib_cuid=92ab3b5b-191f-409a-8935-d33df55751fc; _ga_EB0MPR1JXK=GS1.1.1698209892.1.0.1698209892.0.0.0; _ga=GA1.1.1225953625.1698209893; _ga_C5R0X7CB38=GS1.1.1698209892.1.0.1698209892.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: image/png
content-length: 2569
last-modified: Thu, 10 Nov 2022 13:30:18 GMT
etag: "5a2061-a09-5ed1dc6298e80"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3wKN1tIm4MZL6RoQQneqQNebVI75SuiLeJb5cGj8uWibWjIxid45B011DYRzIXIH8Ersa3eUg4pz7a9CP8%2BWuWD8EE00rbDTVl8tSNgwSVXIaTpEL6aMmvmiELbgD60J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e213fdaf568b-OSL
alt-svc: h3=":443"; ma=86400
uniifyapp.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
188.114.96.1200 OK 1.2 kB URL GET HTTP/3 uniifyapp.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type HTML document, ASCII text, with very long lines (1271), with no line terminators
Hash 40d981045a7516cdadd00e8dccc9c58d
8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3
71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:10 GMT
content-type: application/javascript
last-modified: Fri, 20 Oct 2023 18:17:19 GMT
etag: W/"6532c42f-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gus%2BEA1nZsdDxec3AtUGUmSenEYCEhp3FaqbzP2M5xETROoTRhIPwN4q4ZaRFstT82%2BBoF2MFssydX4uPin6ns711l0yz7KjfiT6JyO8SLH0x3HKfb5Ec6wge2W%2FKRdn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81b7e205cd64568b-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 27 Oct 2023 04:58:10 GMT
cache-control: max-age=172800, public
content-encoding: gzip
uniifyapp.com/wp-content/themes/apptek/assets/js/ajax_add_to_cart.js?ver=1698209889
188.114.96.1200 OK 1.5 kB URL GET HTTP/3 uniifyapp.com/wp-content/themes/apptek/assets/js/ajax_add_to_cart.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (1694), with no line terminators
Hash 8eb5aecc8b872911e6b76a9511fc4dce
bfc0f8ae6fbd1d19e3c4ec766cdcd101e05b6d34
9a32b2881b25f317e72fc0757c8d86ac1eefdc06e4bb1684828b74b8337062ae
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/apptek/assets/js/ajax_add_to_cart.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Fri, 28 Oct 2022 12:12:23 GMT
etag: W/"5a1b51-5d0-5ec172b92d7c0-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6P2xP3vLaFauWNbwZDn0nceyOUQt1PKGPIbWtBs4ViBP4frWUgC8KNypv3GfBEerFESOCIPdK%2BuvtP%2BzouN2C6b8dphcB6csKNu519lSZhUMLw%2BdWVUlRJIgRHozEosb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2061db5568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/js/rt-animated-main.js?ver=1698209889
188.114.96.1200 OK 7.8 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/js/rt-animated-main.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (8060), with no line terminators
Hash 3ed553cc1dcff5ac1944b966917af5dd
89fcdf61b0916c265a842dc2e4db1d216b195415
c8cd6d279295b78ba024871551c2a75f6c2625d4dafc80653a8a99014df7fa6f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/radiantthemes-addons/assets/js/rt-animated-main.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Tue, 08 Nov 2022 06:10:07 GMT
etag: W/"5a0983-1e9c-5ecef6442edc0-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g97H6lDr7BiOCl81nmy7Phtk8Sua0ch73KfkkA0oxD%2F%2FLLRuySQ9%2FI7uEedmqSoXqDBcTQnJxzw9qnDqex%2B0pMe4m8wjM7r%2F92ffH5L8Z3C6r%2BaJMxHDLi7xzXoYXJzX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2061dbd568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/js/anime.2.0.2.min.js?ver=1698209889
188.114.96.1200 OK 11 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/js/anime.2.0.2.min.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (532), with CRLF line terminators
Hash f258ee6f938947e043c7e0984cd7e2b2
7c9416c1b444773b2d82e797131d6047364645a3
ef1b91cc56c369dcc8fd9ee30bb2aa9745075cfc9f594b2ac58edb1600779128
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/radiantthemes-addons/assets/js/anime.2.0.2.min.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Tue, 08 Nov 2022 06:10:07 GMT
etag: W/"5a0961-2bfb-5ecef6442edc0-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d9B2Ru4w%2FZWxqCEr9Vyvg9%2FxcoHVeMeYAafe6GHFva%2Fsadr4DA8rplczwq%2FTqO5edCE%2FNjL2k9ziD5t88fsI6mudiJ%2BJjdc25lGHMdYe4e%2F3z%2F7E2KbHZ%2BEddlOIH56M"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2061dc0568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/plusjakartasans/v8/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yw.woff2
216.58.207.227200 OK 27 kB URL GET HTTP/2 fonts.gstatic.com/s/plusjakartasans/v8/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yw.woff2
IP 216.58.207.227:443
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 27444, version 1.0\012- data
Hash 13d1b429e99059f97e58fa10dd69f8b5
174c7f299158103127d50de82f1086c3b66e8258
1262bff0591c36094d058ab102b84ce34eb1e547e8ff00557bf8d55449e58e40
GET /s/plusjakartasans/v8/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27444
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Oct 2023 04:57:27 GMT
expires: Fri, 18 Oct 2024 04:57:27 GMT
cache-control: public, max-age=31536000
age: 518447
last-modified: Thu, 22 Jun 2023 14:14:33 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
va.tawk.to/v1/session/start
172.67.38.66200 OK 1.1 kB URL POST HTTP/3 va.tawk.to/v1/session/start
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1180), with no line terminators
Hash 4c95c633cc4d751d974ac096db3a96c1
d81734aef2eda4160e5ddc06d832dd99f744da53
043afc62c12571536b2acbe62fad0f35bfc9b4badd899c4edfec1552361ded80
POST /v1/session/start HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://uniifyapp.com/
Content-Type: application/json; charset=utf-8
Content-Length: 175
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:15 GMT
content-type: application/json
x-served-by: visitor-application-preemptive-xxhm
access-control-allow-origin: https://uniifyapp.com
access-control-allow-credentials: true
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e2252bbeb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/uploads/elementor/css/custom-widget-icon-list.min.css?ver=1695054609
188.114.96.1200 OK 9.9 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/elementor/css/custom-widget-icon-list.min.css?ver=1695054609
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (9896), with no line terminators
Hash bd20390e7b3f54019195858c906db92a
329db1ebb6393a2226e34f5d700cf7d678dad6f0
06ca145d705c8952559ba8222eca9d753ff5659117469c64fc7bba11f07e89d4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/elementor/css/custom-widget-icon-list.min.css?ver=1695054609 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 16:30:09 GMT
etag: W/"5a0016-26a8-605a4a7d893c5-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g%2FJCPRJ8RJh2xeRpRfAzGGn1iDCGOMEHm%2BcelWB98h%2Bl6J94dKpPsOdJ78ImOyx%2Fjsg8fBjvTETJDgB1JdYz5Na3cw51SvSw4UXHWK0cgQzYnkMpaYmOJGoRUJ12Puqe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e205bd60568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.16.3
188.114.96.1200 OK 59 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.16.3
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.16.3 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 16:27:06 GMT
etag: W/"3e2f1b-e5ec-605a49cfe49fd-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8HBv4M1%2BAOjLbw8PFogmrJS8F%2BD8y0TBLst3vN7u8ot%2B8Wnfy0IB5KwFw11gknTqLElQVtVQhGTmwDxy9R7VGJg2pbzPhvbOEuiVQuTg2eFYxo3svCXzFY2CN4zyo64J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2063dd9568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=44045558&utk=
104.17.90.154200 OK 116 B URL GET HTTP/2 forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=44045558&utk=
IP 104.17.90.154:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA5:D1:D2:E1:EA:8D:D7:F7:79:F2:ED:55:66:75:F5:52:07:A7:F4:B3
ValiditySat, 29 Apr 2023 00:00:00 GMT - Sun, 28 Apr 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash fcfb4d332aff6a4cce841fd765cfffbc
ca4f70b3cb9eca1e64345004a8ecb9bd9a0345ea
05671256e5ac5755bf4845a1ff27405e07fc329744aa08eb125a299e24d1b65b
GET /collected-forms/v1/config/json?portalId=44045558&utk= HTTP/1.1
Host: forms.hscollectedforms.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: application/json;charset=utf-8
vary: Accept-Encoding
cache-control: max-age=0
x-content-type-options: nosniff
access-control-allow-origin: https://uniifyapp.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: *
access-control-max-age: 180
x-robots-tag: none
x-envoy-upstream-service-time: 2
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-7c89bb96b9-hgw6b
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-hubspot-correlation-id: ec337f4b-72e6-4ce7-9bd5-f5eee9455669
x-request-id: ec337f4b-72e6-4ce7-9bd5-f5eee9455669
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 81b7e210ce4d56c5-OSL
content-encoding: br
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-app.js
172.67.38.66200 OK 151 B URL GET HTTP/2 embed.tawk.to/_s/v4/app/6532b9314ab/js/twk-app.js
IP 172.67.38.66:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 04a9862af6efaf787bc8fb8e99ba6987
a57bb8f258eb1a60dc3b288a608ad8ef9fbecef3
ecc74c329a700e3e6ca29aed5ffe3c166cf39670c8b11573fa7f837f79a71b5c
GET /_s/v4/app/6532b9314ab/js/twk-app.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Oct 2023 04:58:14 GMT
content-type: application/javascript
last-modified: Fri, 20 Oct 2023 17:31:43 GMT
etag: W/"e736e189edb5d0d9d5b8e7f23dd9114a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 81b7e220581c56ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/plusjakartasans/v8/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yw.woff2
216.58.207.227200 OK 27 kB URL GET HTTP/2 fonts.gstatic.com/s/plusjakartasans/v8/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yw.woff2
IP 216.58.207.227:443
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 27444, version 1.0\012- data
Hash 13d1b429e99059f97e58fa10dd69f8b5
174c7f299158103127d50de82f1086c3b66e8258
1262bff0591c36094d058ab102b84ce34eb1e547e8ff00557bf8d55449e58e40
GET /s/plusjakartasans/v8/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27444
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Oct 2023 04:57:27 GMT
expires: Fri, 18 Oct 2024 04:57:27 GMT
cache-control: public, max-age=31536000
age: 518447
last-modified: Thu, 22 Jun 2023 14:14:33 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
uniifyapp.com/wp-content/uploads/elementor/css/post-1294.css?ver=1695054608
188.114.96.1200 OK 3.4 kB URL GET HTTP/3 uniifyapp.com/wp-content/uploads/elementor/css/post-1294.css?ver=1695054608
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (3427), with no line terminators
Hash 0935016ed2d5b7bf473252b0425bfe30
a97f66535d1624ee880e6e9bf2940773ee1232b9
17e22f14db30019de283e3a53241733e4d6d0f4c56fac127b6b292e16348377a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/elementor/css/post-1294.css?ver=1695054608 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 16:30:08 GMT
etag: W/"5a0012-d63-605a4a7ce27be-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ULMXyAiJwXv3zENx9CUbZbo288sSKfDSWlO9LVG1MY%2B626zTJ2rpIRKL4nu1Kp3SKZv7zHhnN2T1mPiOcrjEb4JYgw3n4E1FgHFjohs9zkBFOkmGGK%2BUO3bbKlhss%2FJb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20c78d2568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/mailin/css/mailin-front.css?ver=0621ff1d1a7a69c31fa9c0bd192756a5
188.114.96.1200 OK 2.7 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/mailin/css/mailin-front.css?ver=0621ff1d1a7a69c31fa9c0bd192756a5
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (2899), with no line terminators
Hash 1dab301b9a9ac952e5339dc96c4f30d9
5191bce6f92afb9456bb583ed1ffde388ae42704
a14cdf9870285bb0e76cebbc56976c1730633b7615cc041f8be4d45e97a24ae3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/mailin/css/mailin-front.css?ver=0621ff1d1a7a69c31fa9c0bd192756a5 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 16:28:08 GMT
etag: W/"3e1a02-a79-605a4a0a89659-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kLX340T3sQKxQPnkVvi%2FPA81sNoVE7lmcbevB%2FgivrrYr9mfH%2BD7%2BgPB9sJW37%2BlZkEp%2BF%2FYqNQhf6zccFvKC2nw1pahAWmA%2ByzkXcFJsB8RspDXnn32Zc04O2brB9rF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20c98eb568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
js.hsleadflows.net/leadflows.js
104.18.124.12200 OK 553 kB URL GET HTTP/2 js.hsleadflows.net/leadflows.js
IP 104.18.124.12:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint55:A1:55:C6:3D:AC:5A:B1:4F:CD:CD:80:A6:AD:F1:B8:4E:0B:34:67
ValiditySat, 06 May 2023 00:00:00 GMT - Sun, 05 May 2024 23:59:59 GMT
Size 553 kB (553370 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /leadflows.js HTTP/1.1
Host: js.hsleadflows.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uniifyapp.com
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 19 Oct 2023 12:04:56 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: kynIQz4kS2EcRSsReYWDL4ghReqTd7ZR
etag: W/"91351547057cda60bc18bf73dfa40054"
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: RefreshHit from cloudfront
via: 1.1 9d2dee9b44718f249b789987d2cbe62c.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: 7qFceDkIi0SZIcZX6Cp8koijp-LgmAtV6xbnezRpaM3vEMQ5dc06uQ==
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=lead-flows-js/static-1.1271/bundle/main/lead-flows-release.js&cfRay=81b27eb7bbe0abcf-ARN
cache-control: s-maxage=86400, max-age=0
x-hs-target-asset: lead-flows-js/static-1.1271/bundle/main/lead-flows-release.js
x-content-type-options: nosniff
x-hs-cache-status: MISS
x-envoy-upstream-service-time: 22
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-7c89bb96b9-27cn8
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-hubspot-correlation-id: 1f4c2887-98de-43ad-ae00-e5b1f7052562
x-request-id: 1f4c2887-98de-43ad-ae00-e5b1f7052562
cache-tag: staticjsapp-lead-flows-cloudflare-web-prod,staticjsapp-prod
cf-cache-status: HIT
server: cloudflare
cf-ray: 81b7e20ee95956c4-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=GT-MBLHFQZ&l=dataLayer&cx=c
142.250.74.168200 OK 213 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=GT-MBLHFQZ&l=dataLayer&cx=c
IP 142.250.74.168:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint81:B9:A4:E4:E4:84:05:A7:F6:52:4F:E2:74:27:36:05:0D:74:15:89
ValidityThu, 28 Sep 2023 05:26:20 GMT - Thu, 21 Dec 2023 05:26:19 GMT
File type ASCII text, with very long lines (4179)
Size 213 kB (213356 bytes)
Hash 22a84659d4baf687996ff765909ba9ef
95da5e50e818ed2601f09217f088a34ad9e7b69a
bdbb831a3023ca68addd353e26107ef5420f608f3d2c40ea5f8277c999fd6908
GET /gtag/js?id=GT-MBLHFQZ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 25 Oct 2023 04:58:11 GMT
expires: Wed, 25 Oct 2023 04:58:11 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76756
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
uniifyapp.com/wp-content/themes/apptek/assets/js/jquery.sidr.min.js?ver=1698209889
188.114.96.1200 OK 6.9 kB URL GET HTTP/3 uniifyapp.com/wp-content/themes/apptek/assets/js/jquery.sidr.min.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (7214), with no line terminators
Hash 9ea639276092bff3733700c32762583f
a8e543a124a2c74e887d94de6fd96d96e1a79b3e
321ce152d40bb8e09e363a6ae44482ddde94fd333865eda2489fca3713523196
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/apptek/assets/js/jquery.sidr.min.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 10:46:20 GMT
etag: W/"5a1b5b-1aff-5eb4ccd6bf700-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TH60yIacCB%2FdpsFqncQ81AiajScMMTHizmcoljMt9qLoMAJdlTCO%2FGGkjRRDe4uUwe6hHBk2xszRQaKbNqtVfoDfHivq61F3uPNGfGGAyw%2BDJ15Lh%2BHZ0yfMR6u6U8l8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2060dad568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
sibautomation.com/sa.js?plugin=wordpress&key=ehnbv4qti39900l4o230qvgy
172.64.150.186200 OK 12 kB URL GET HTTP/2 sibautomation.com/sa.js?plugin=wordpress&key=ehnbv4qti39900l4o230qvgy
IP 172.64.150.186:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE6:DD:AC:85:7E:4E:D8:D7:A9:B8:1C:2D:DE:3C:D9:47:0C:64:0F:CD
ValidityWed, 10 May 2023 00:00:00 GMT - Thu, 09 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (353)
Hash 332e2a15be7f6e15f4e6acd1d6f79796
ee8e518ad2fea4749629bb0eb16256326ef4aee2
85d63cf4ee36606aae67e39654ad73dfed0b8079a50af55aad4382fbb98ad80d
GET /sa.js?plugin=wordpress&key=ehnbv4qti39900l4o230qvgy HTTP/1.1
Host: sibautomation.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: text/javascript; charset=utf-8
x-powered-by: Sails <sailsjs.com>
etag: W/"2f56-7o5RitL+pHSWKbsOsWJWMm70ruI"
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: MISS
expires: Wed, 25 Oct 2023 04:59:11 GMT
cache-control: public, max-age=60
server: cloudflare
cf-ray: 81b7e20eac7e56b4-OSL
X-Firefox-Spdy: h2
vsa43.tawk.to/s/?k=6538a067bfcd9379978d46a9&cver=0&pop=false&asver=252&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2M2I5MGU5ZjQ3NDI1MTI4NzkwYzIxZDciLCJ2aWQiOiI2M2I5MGU5ZjQ3NDI1MTI4NzkwYzIxZDctOVBFY0ZxaEticUt1OWpRamtKelNaIiwic2lkIjoiNjUzOGEwNjdiZmNkOTM3OTk3OGQ0NmE5IiwiaWF0IjoxNjk4MjA5ODk1LCJleHAiOjE2OTgyMTE2OTUsImp0aSI6IjE5Mm04UGR0Y2lWcEV4T0E4TFlkcSJ9.DNfsdQFDMX69Mk7Wu4TFMGl8bmRk-P4nsdudRl_GAdjjVeVf4uG5bzdsbUCauKDHy66vn6r-s-jdgia5ridMNA&EIO=3&transport=websocket&__t=OjbCfWm
104.22.25.131101 Switching Protocols 0 B URL GET HTTP/1.1 vsa43.tawk.to/s/?k=6538a067bfcd9379978d46a9&cver=0&pop=false&asver=252&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2M2I5MGU5ZjQ3NDI1MTI4NzkwYzIxZDciLCJ2aWQiOiI2M2I5MGU5ZjQ3NDI1MTI4NzkwYzIxZDctOVBFY0ZxaEticUt1OWpRamtKelNaIiwic2lkIjoiNjUzOGEwNjdiZmNkOTM3OTk3OGQ0NmE5IiwiaWF0IjoxNjk4MjA5ODk1LCJleHAiOjE2OTgyMTE2OTUsImp0aSI6IjE5Mm04UGR0Y2lWcEV4T0E4TFlkcSJ9.DNfsdQFDMX69Mk7Wu4TFMGl8bmRk-P4nsdudRl_GAdjjVeVf4uG5bzdsbUCauKDHy66vn6r-s-jdgia5ridMNA&EIO=3&transport=websocket&__t=OjbCfWm
IP 104.22.25.131:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/?k=6538a067bfcd9379978d46a9&cver=0&pop=false&asver=252&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2M2I5MGU5ZjQ3NDI1MTI4NzkwYzIxZDciLCJ2aWQiOiI2M2I5MGU5ZjQ3NDI1MTI4NzkwYzIxZDctOVBFY0ZxaEticUt1OWpRamtKelNaIiwic2lkIjoiNjUzOGEwNjdiZmNkOTM3OTk3OGQ0NmE5IiwiaWF0IjoxNjk4MjA5ODk1LCJleHAiOjE2OTgyMTE2OTUsImp0aSI6IjE5Mm04UGR0Y2lWcEV4T0E4TFlkcSJ9.DNfsdQFDMX69Mk7Wu4TFMGl8bmRk-P4nsdudRl_GAdjjVeVf4uG5bzdsbUCauKDHy66vn6r-s-jdgia5ridMNA&EIO=3&transport=websocket&__t=OjbCfWm HTTP/1.1
Host: vsa43.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://uniifyapp.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nmFdo1emZ20aFUVHYZld5A==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Wed, 25 Oct 2023 04:58:16 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: zIQTDQYOq1+3Kx+tib2XiEJU/Cc=
sec-websocket-extensions: permessage-deflate
strict-transport-security: max-age=0; includeSubDomains; preload
CF-Cache-Status: DYNAMIC
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 81b7e228de775695-OSL
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/js/animation2.js?ver=1698209889
188.114.96.1200 OK 7.5 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/radiantthemes-addons/assets/js/animation2.js?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (7687), with no line terminators
Hash 03f17f7ced1cd829d460f51ade6b8433
e9fb08a9ccdabd338d66f68e3ca8d020aa7da329
c4f2a9ae947a7e3294ab5c71aab5f0c23b8bced5f1b9dda190064a93438c1959
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/radiantthemes-addons/assets/js/animation2.js?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:11 GMT
content-type: application/javascript
last-modified: Tue, 08 Nov 2022 06:10:07 GMT
etag: W/"5a0960-1d1f-5ecef6442edc0-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m8nHVZXvZXrkmaG7LPmbBxop5VyHTSzIXopfdi2kc8tKK%2FEL%2FkW3%2B35zveTgHwXhwK2wLnQJZ3WmhETrqqSnocUOXGzqqqnfMpvFawpir7ZJ9YZPTPIcWNObBssnA0FS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e2061dc2568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uniifyapp.com/wp-content/plugins/radiantthemes-addons/widgets/custom-button/css/button-style-four.css?ver=1698209889
188.114.96.1200 OK 1.7 kB URL GET HTTP/3 uniifyapp.com/wp-content/plugins/radiantthemes-addons/widgets/custom-button/css/button-style-four.css?ver=1698209889
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectuniifyapp.com
Fingerprint5C:FF:F5:6A:C2:C9:72:3C:1C:16:6D:5E:CD:7F:CB:6D:1C:96:FB:FD
ValiditySun, 17 Sep 2023 18:30:50 GMT - Sat, 16 Dec 2023 18:30:49 GMT
File type ASCII text, with very long lines (1772), with no line terminators
Hash 183887c48c1e2bc531d2abc494b800ba
3e3c330f7a4c9a5d1e3dfea8a12822d9314437ad
4b404b106d9463c99aa6579f721250f24aa0d98c0f4b28c5c40f11e7a0e07a75
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/radiantthemes-addons/widgets/custom-button/css/button-style-four.css?ver=1698209889 HTTP/1.1
Host: uniifyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://uniifyapp.com/
Cookie: PHPSESSID=6hf5mal83665e926e1f1s8ek3i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 25 Oct 2023 04:58:12 GMT
content-type: text/css
last-modified: Tue, 08 Nov 2022 06:10:07 GMT
etag: W/"5a0a3f-6a6-5ecef6442edc0-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cSizdTVoTgkug6pQNT6FEzgeRhJ5%2FRwjriQ8YxVBQbTCV2VKPdw8wsk2yhOZhP%2FbqJFfXkXRkzTR%2B0dEs7xCcY0nPTbviPtFb%2FUT5Vv1CzpxCu34t%2FgswbL%2BVQ1uxvj8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81b7e20cb8fa568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400