| i0.wp.com/res.cloudinary.com/glide/image/fetch/https%3A%2F%2Fs.yimg.com%2Fny%2Fapi%2Fres%2F1.2%2FovyDMANDDeT.HgL5ai09kA--%2FYXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA-%2Fhttps%3A%2F%2Fmedia.zenfs.com%2Fen%2Fpeople_218%2F63ea4746eeecb13581abb398a2a55869?w=1200&resize=1200,0&ssl=1 |  192.0.77.2 | 200 OK | 91 kB |
URL GET HTTP/2i0.wp.com/res.cloudinary.com/glide/image/fetch/https%3A%2F%2Fs.yimg.com%2Fny%2Fapi%2Fres%2F1.2%2FovyDMANDDeT.HgL5ai09kA--%2FYXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA-%2Fhttps%3A%2F%2Fmedia.zenfs.com%2Fen%2Fpeople_218%2F63ea4746eeecb13581abb398a2a55869?w=1200&resize=1200,0&ssl=1 IP192.0.77.2:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerSectigo Limited Subject*.wp.com Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2 ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, progressive, precision 8, 1200x800, components 3 Hashfa95cba8872ffae11673094e1dfb637b 60ff81301ef62cc3a37ada6e7c8b134ca67ce029 29539aff534412197407b47bb883349436e966aa4d3dc5726cb1666329526266
GET /res.cloudinary.com/glide/image/fetch/https%3A%2F%2Fs.yimg.com%2Fny%2Fapi%2Fres%2F1.2%2FovyDMANDDeT.HgL5ai09kA--%2FYXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA-%2Fhttps%3A%2F%2Fmedia.zenfs.com%2Fen%2Fpeople_218%2F63ea4746eeecb13581abb398a2a55869?w=1200&resize=1200,0&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 20:19:56 GMT
content-type: image/jpeg
content-length: 90814
last-modified: Wed, 08 May 2024 16:48:58 GMT
expires: Sat, 09 May 2026 04:48:58 GMT
cache-control: public, max-age=63115200
link: <https://res.cloudinary.com/glide/image/fetch/https%3A%2F%2Fs.yimg.com%2Fny%2Fapi%2Fres%2F1.2%2FovyDMANDDeT.HgL5ai09kA--%2FYXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA-%2Fhttps%3A%2F%2Fmedia.zenfs.com%2Fen%2Fpeople_218%2F63ea4746eeecb13581abb398a2a55869>; rel="canonical"
x-content-type-options: nosniff
etag: "b0b083d3ca12cd6b"
x-bytes-saved: 3207
vary: Accept
x-nc: HIT arn 6
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i3.wp.com/www.dancehallmag.com/assets/2020/09/romainvirgo-wife.jpg?w=1200&resize=1200,0&ssl=1 | 192.0.77.2 | 200 OK | 65 kB |
URL GET HTTP/2i3.wp.com/www.dancehallmag.com/assets/2020/09/romainvirgo-wife.jpg?w=1200&resize=1200,0&ssl=1 IP192.0.77.2:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerSectigo Limited Subject*.wp.com Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2 ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x798, Scaling: [none]x[none], YUV color, decoders should clamp Hash7dfc48f4e94a0dc9a567859aab7bd12e c7bf317c1449684d34b16605f1e918d8f1aada63 e4dd2d7c5aa58ac513bf463eddd363ad3fdd994d8491719dfa28c6176078b9ec
GET /www.dancehallmag.com/assets/2020/09/romainvirgo-wife.jpg?w=1200&resize=1200,0&ssl=1 HTTP/1.1
Host: i3.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 20:19:56 GMT
content-type: image/webp
content-length: 65356
last-modified: Mon, 06 May 2024 19:04:46 GMT
expires: Thu, 07 May 2026 07:04:46 GMT
cache-control: public, max-age=63115200
link: <https://www.dancehallmag.com/assets/2020/09/romainvirgo-wife.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "b844047ea5c126d8"
vary: Accept
x-nc: MISS arn 2
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| i1.wp.com/www.europanostra.org/wp-content/uploads/2024/05/20240507-UNDP-Event-on-Earthquake-hit-Region-of-Turkiye.jpg?w=1200&resize=1200,0&ssl=1 | 192.0.77.2 | 200 OK | 108 kB |
URL GET HTTP/2i1.wp.com/www.europanostra.org/wp-content/uploads/2024/05/20240507-UNDP-Event-on-Earthquake-hit-Region-of-Turkiye.jpg?w=1200&resize=1200,0&ssl=1 IP192.0.77.2:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerSectigo Limited Subject*.wp.com Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2 ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp Size108 kB (107874 bytes) Hashfad86c2f8da5f8fce0a1d7f92b078a44 f4bdfa6940683bb3e3060301609a518526168fec d320b848d3f7d20eb33702f09ba7a4b952dcb5e2b8fe1ab0c1d66c5d0e77f501
GET /www.europanostra.org/wp-content/uploads/2024/05/20240507-UNDP-Event-on-Earthquake-hit-Region-of-Turkiye.jpg?w=1200&resize=1200,0&ssl=1 HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 20:19:56 GMT
content-type: image/webp
content-length: 107874
last-modified: Wed, 08 May 2024 20:19:56 GMT
expires: Sat, 09 May 2026 08:19:56 GMT
cache-control: public, max-age=63115200
link: <https://www.europanostra.org/wp-content/uploads/2024/05/20240507-UNDP-Event-on-Earthquake-hit-Region-of-Turkiye.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "a2aeec2deb42d2e3"
vary: Accept
x-nc: MISS arn 4
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www.firescalaf.cat/wp-content/fonts/jost/92zatBhPNqw73oTd4g.woff2 |  188.114.96.1 | 200 OK | 27 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/fonts/jost/92zatBhPNqw73oTd4g.woff2 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 26620, version 1.0 Hash8851189b303b4d03a80b8243a4fac433 2a04886958dd3f8fc11562db9b3281699475aad3 1e3ceb99e33b0f3d149b7d617b24a487d07fe7595aa24d04a7f45a0312b0654c
GET /wp-content/fonts/jost/92zatBhPNqw73oTd4g.woff2 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/wp-content/fonts/95bfe4f26defe848c6336754a283badb.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: font/woff2
content-length: 26620
cache-control: public, max-age=43200
expires: Mon, 06 May 2024 16:46:31 GMT
etag: "67fc-66360020-151f;;;"
last-modified: Sat, 04 May 2024 09:30:08 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 693
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j4BmpLrJyn3v7%2Fup%2FJG2SbtCBlF95GJfvGjw1x0XRiC25x5sp1asuZWoksMGojV9KJMapJsaYUlofbQ1epI2%2BA0b4DMhwZZuFtX29NneR1MZcGcG1xAtFZle9BhfrywPpFc6fT4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c25c88d82b50f-OSL
|
|
| heedlessplanallusion.com/9d3b448e547be241c68efc985e24dcc2/invoke.js | 172.240.108.76 | 200 OK | 12 kB |
URL GET HTTP/1.1heedlessplanallusion.com/9d3b448e547be241c68efc985e24dcc2/invoke.js IP172.240.108.76:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectheedlessplanallusion.com Fingerprint22:FE:62:81:B7:05:16:32:08:5A:33:B1:A4:DE:C2:EC:39:69:1B:DB ValiditySun, 17 Mar 2024 07:41:47 GMT - Sat, 15 Jun 2024 07:41:46 GMT
File typeJavaScript source, ASCII text, with very long lines (31336), with no line terminators Hash5efdddb63eaad0a293452aab29fcb1f7 726f4ab264af7c7ea40b2cb582301a971bc0b5f5 4d4049f547816ffa7a7d29d2c0f9118961d9a79e06f2af8a31cf8e78962a15a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /9d3b448e547be241c68efc985e24dcc2/invoke.js HTTP/1.1
Host: heedlessplanallusion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 20:19:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4aca7a11b3863a4553fb694507d7a3ed
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/slick/slick.min.js?ver=1.8.1 | 188.114.96.1 | 200 OK | 23 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/slick/slick.min.js?ver=1.8.1 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeJavaScript source, ASCII text, with very long lines (42862) Hashd5a61c749e44e47159af8a6579dda121 3b41b3bc956685015a347a2238e71db29dfa0dbb 0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740
GET /wp-content/themes/digital-newspaper/assets/lib/slick/slick.min.js?ver=1.8.1 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/javascript
etag: W/"a76f-66360015-373ad2;br"
last-modified: Sat, 04 May 2024 09:29:57 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 3677
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V28erfPRzLVoXUNh8uyw9RcBFhEkVpBes%2B46Z1vsJxaRCqHfheWPWiHhzHakxtAca3pHYJNxOqOZVpB2XTBnZG8FfxLZu0OBfIrlREb1BSsN%2F0sNmERvY5owTmp9WVYvyzuH5BM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c6185bb50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/js-marquee/jquery.marquee.min.js?ver=1.6.0 | 188.114.96.1 | 200 OK | 2.8 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/js-marquee/jquery.marquee.min.js?ver=1.6.0 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeJavaScript source, ASCII text, with very long lines (9029), with no line terminators Hash38cf1efd3af828942692f619be330bcd c7836fb3eb61f96e6c8bc0344d77cf5618798315 feade23a47f6041e6d1008885642dd7ab7cc4f12d94b0c7191c9cf8ca55df97d
GET /wp-content/themes/digital-newspaper/assets/lib/js-marquee/jquery.marquee.min.js?ver=1.6.0 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/javascript
etag: W/"2345-66360015-373ace;br"
last-modified: Sat, 04 May 2024 09:29:57 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 3677
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=weOTCpXxpQ10zwv5LltTHerothH29tq5CTginPxBYmeslp7lpHF99yP4d%2FAa3yj2b8a5HyQbffNT8GhJOyfzMlHicYN987aSeSUIb%2ByjLohiMFy8OJnSRE5CzQdqVrLXwUKbL14%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c61864b50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/fontawesome/css/all.min.css?ver=5.15.3 | 188.114.96.1 | 200 OK | 30 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/fontawesome/css/all.min.css?ver=5.15.3 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeASCII text, with very long lines (52276) Hash5222e06b77a1692fa2520a219840e6be 8b4236206a8b86af3761a244277663046d7ff7ee 0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5
GET /wp-content/themes/digital-newspaper/assets/lib/fontawesome/css/all.min.css?ver=5.15.3 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/css
cache-control: public, max-age=43200
expires: Mon, 06 May 2024 06:03:19 GMT
etag: W/"18f49-66360015-373ac3;br"
last-modified: Sat, 04 May 2024 09:29:57 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 4350
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lNsOCEvUF6av0ptRQzntedap7xBmEnFyGtaBHCSvJcVYTE1HlPHRPghSx0T5gT6p2YtdPAc%2B1E7FYswHf82LnPhUKaQcav4DlA4pCz1zjlNGtjf1yPsXS5yRTtPP4rwRxwghIyg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c5f811b50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0 | 188.114.96.1 | 200 OK | 4.4 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeASCII text, with very long lines (2367), with no line terminators Hash79dc2fc9e9be25c4e4b65af78a1cf86a 36b819e4e1c0761f95c86743a307cff518e4c7ef da26f75773d686f672adddeabc4378a593a11845f01c01dbd2c941744d2ff96a
GET /wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=2713
alt-svc: h3=":443"; ma=86400
etag: W/"a99-660d8c51-277738;br"
expires: Mon, 06 May 2024 06:03:19 GMT
last-modified: Wed, 03 Apr 2024 17:05:21 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 4350
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jvtIhqRPnP4U4kp2xuXdaYg1k1mwZrBKIs%2FKONN%2Fulvuxs4l7cOs%2FfI8KX4404luJpK7DzjoIEv0q6lQs3HiD5cHFNqHN1mAwy3jF3hY%2BWhqpx22vrVZkmZE%2B1Bs91pnl49ToRk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c5f80eb50f-OSL
content-encoding: br
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash17d83a6a1ce5ec032b9d0be6c8c68106 9b412e1c9f9694753b73daa262811ec4c420e7d1 935af939ae598190c9c8175f1ac54241ab2614b3c7599a4c92e1be2ecd42ab23
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 08 May 2024 20:19:57 GMT
Last-Modified: Wed, 08 May 2024 18:33:49 GMT
Server: ECAcc (ska/F6E1)
X-Cache: Miss from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hd0SUaEUuY6UHuAASskGWxYJ17HIMpRWkAWLZg-dHF4hmvlUnBVuTg==
Age: 6368
|
|
| www.firescalaf.cat/wp-content/fonts/jost/92zatBhPNqw73oTd4g.woff2 | 188.114.96.1 | 200 OK | 27 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/fonts/jost/92zatBhPNqw73oTd4g.woff2 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 26620, version 1.0 Hash8851189b303b4d03a80b8243a4fac433 2a04886958dd3f8fc11562db9b3281699475aad3 1e3ceb99e33b0f3d149b7d617b24a487d07fe7595aa24d04a7f45a0312b0654c
GET /wp-content/fonts/jost/92zatBhPNqw73oTd4g.woff2 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/wp-content/fonts/95bfe4f26defe848c6336754a283badb.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:57 GMT
content-type: font/woff2
content-length: 26620
cache-control: public, max-age=43200
expires: Mon, 06 May 2024 16:46:31 GMT
etag: "67fc-66360020-151f;;;"
last-modified: Sat, 04 May 2024 09:30:08 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 694
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KEQL2J5b0BMgcskcNA1IiYqrzoyDXyOQv%2Ful7RglBWlP4CMJ1lvlf4dCD%2FMLyU5vXBLJ7m0RAwTaHXdq5SS%2BZr%2BN3%2Fn4GJvZrOmh1MBW6p%2BZcr%2FRi7yKXrWm6J0H5tjFinFG920%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c25ce98e6b50f-OSL
|
|
| www.firescalaf.cat/wp-includes/css/dist/block-library/style.min.css?ver=6.5.3 | 188.114.96.1 | 200 OK | 26 kB |
URL GET HTTP/3www.firescalaf.cat/wp-includes/css/dist/block-library/style.min.css?ver=6.5.3 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeASCII text, with very long lines (59701) Hash51a8390b47aa0582cf2d9c96c5addee2 b16a640874025d085c38119a1a02a3460f83f2de 98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.3 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/css
cache-control: public, max-age=43200
expires: Wed, 08 May 2024 15:56:01 GMT
etag: W/"1bae5-660cbe00-4ae04c;br"
last-modified: Wed, 03 Apr 2024 02:25:04 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FgLMu7ZQ8p5ehO0LBH2cpG0N4UR9ZnTGI%2BPspBHAS60c%2F4wJ25muinGzCnWGmdW6%2FNkVSZB1e%2FDlqFPG2BAsje0GXc7Vg1NcG1fE2hlfac0tu4xh8ReuY98xpe2sOFtvPke%2F3ZA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c5f80cb50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/fontawesome/webfonts/fa-solid-900.woff2 | 188.114.96.1 | 200 OK | 150 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/fontawesome/webfonts/fa-solid-900.woff2 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 150020, version 772.1280 Size150 kB (150020 bytes) Hashd5e647388e2415268b700d3df2e30a0d 97f0942c6627ddd89fb62170e5cac9a2cbd6c98c 886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9
GET /wp-content/themes/digital-newspaper/assets/lib/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/fontawesome/css/all.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:57 GMT
content-type: font/woff2
content-length: 150020
cache-control: public, max-age=43200
expires: Mon, 06 May 2024 16:46:32 GMT
etag: "24a04-66360015-373ac9;;;"
last-modified: Sat, 04 May 2024 09:29:57 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 693
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GIZSwciluWsRgR4MqIYum5qmasI1qsGvX355ideZc%2BoIIhiZe0gtU3%2BVcBNlRdhxM2BvIPLdztcxYqTS9AiLn84sWx0zTVhfVuv%2B2tXYmctDUc2yKg98P5qRW48%2FNsBU6l40hCc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c25ce98e7b50f-OSL
|
|
| www.firescalaf.cat/wp-content/fonts/jost/92zatBhPNqw73oTd4g.woff2 | 188.114.96.1 | 200 OK | 27 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/fonts/jost/92zatBhPNqw73oTd4g.woff2 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 26620, version 1.0 Hash8851189b303b4d03a80b8243a4fac433 2a04886958dd3f8fc11562db9b3281699475aad3 1e3ceb99e33b0f3d149b7d617b24a487d07fe7595aa24d04a7f45a0312b0654c
GET /wp-content/fonts/jost/92zatBhPNqw73oTd4g.woff2 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/wp-content/fonts/95bfe4f26defe848c6336754a283badb.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:57 GMT
content-type: font/woff2
content-length: 26620
cache-control: public, max-age=43200
expires: Mon, 06 May 2024 16:46:31 GMT
etag: "67fc-66360020-151f;;;"
last-modified: Sat, 04 May 2024 09:30:08 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 694
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2xQLxe1nnlkzGBDF2xfOxh7n%2Fib5CYckBOOFZ3ZBR%2F4GlYpKozJvmLaSB1UerZlMlCJqbQD%2FTdQg4eHMR9o9OqnangQP1gO20nthbJPjCc9W2GuOpD%2BkWiqTtNOrSeRy2ffW6Rk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c25ce9901b50f-OSL
|
|
| www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/fontawesome/webfonts/fa-regular-400.woff2 | 188.114.96.1 | 200 OK | 24 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/fontawesome/webfonts/fa-regular-400.woff2 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 24488, version 772.1280 Hash747442fa76f1d9a31f9a54a2e8a4b448 07fc0ae14bb3187839082aed3bca11dfb1e04524 9169d8be7a8177e5a92a4d04b6de7f6504b938573bf4da5889871c4f376d3849
GET /wp-content/themes/digital-newspaper/assets/lib/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/fontawesome/css/all.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:57 GMT
content-type: font/woff2
content-length: 24488
cache-control: public, max-age=43200
expires: Mon, 06 May 2024 16:46:32 GMT
etag: "5fa8-66360015-373ac7;;;"
last-modified: Sat, 04 May 2024 09:29:57 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 693
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D3ZwjceJxwIIPtYeZ5NW%2FI4ARONcraLncd27nKRxveNy9%2BrFYMamFRtsFrc%2FsMKSkTNJ5ZN9oa829x%2Fu6ZPfoKn%2F09aHMWcTGlKznIjWuEZI%2F%2Fa688ZbpclmKmyxnqWSwNDa%2BX8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c25ced96db50f-OSL
|
|
| www.firescalaf.cat/wp-content/plugins/featured-image-from-url/includes/html/js/json-ld.js?ver=4.7.4 | 188.114.96.1 | 200 OK | 150 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/plugins/featured-image-from-url/includes/html/js/json-ld.js?ver=4.7.4 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeJavaScript source, ASCII text Size150 kB (150271 bytes) Hash7400be6825870bab4c9b079e24e0132d 394e6d8296d3cee3628a106d7e091f066c606af8 8b9e686457dcdbe229329076432ea1239d05c3d4411f89bcebf0951bbf00ff6d
GET /wp-content/plugins/featured-image-from-url/includes/html/js/json-ld.js?ver=4.7.4 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/javascript
etag: W/"1fb-66383f7e-374d81;br"
last-modified: Mon, 06 May 2024 02:25:02 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 3677
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=806sx7X0KGcCNNPe3vrtGDk%2FQSiwhMRyM4goZhcgoyWBYqz2gPwufmm9tuF02KVRw3pXER3rAR55U4G%2BgcCHzLmFna7sWPuKZa88onVgcUlGRt228fcoxLxWQfidIqAbup5Z8CY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c62898b50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/wp-content/fonts/jost/92zatBhPNqw73oTd4g.woff2 | 188.114.96.1 | 200 OK | 27 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/fonts/jost/92zatBhPNqw73oTd4g.woff2 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 26620, version 1.0 Hash8851189b303b4d03a80b8243a4fac433 2a04886958dd3f8fc11562db9b3281699475aad3 1e3ceb99e33b0f3d149b7d617b24a487d07fe7595aa24d04a7f45a0312b0654c
GET /wp-content/fonts/jost/92zatBhPNqw73oTd4g.woff2 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/wp-content/fonts/95bfe4f26defe848c6336754a283badb.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:57 GMT
content-type: font/woff2
content-length: 26620
cache-control: public, max-age=43200
expires: Mon, 06 May 2024 16:46:31 GMT
etag: "67fc-66360020-151f;;;"
last-modified: Sat, 04 May 2024 09:30:08 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 694
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AjXm%2BHqkjE2wH9UlMTmRJRiAXlFpNgiltSoiC5EKTS71P4WwNmk62ZfrgEN%2BuUhBOdsDZuBE%2BGrvjqLKlYNshvqEZ5hGmRffXX5u8ANxgO%2Fv9mmIFZLCfnhUIh6C7aYDB1NND%2Fo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c25cf09c1b50f-OSL
|
|
| www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/fontawesome/webfonts/fa-brands-400.woff2 | 188.114.96.1 | 200 OK | 110 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/fontawesome/webfonts/fa-brands-400.woff2 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 109808, version 772.1280 Size110 kB (109808 bytes) Hash005c9aa92b564b73b7582cc4f1fa49cb 373361ed756b1fe68ce2f5968d467826b6973bb5 faae6fc0aa94cc5bde5076647c817a23206096a1cbeda10d1c6f3d89d6163ed1
GET /wp-content/themes/digital-newspaper/assets/lib/fontawesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/fontawesome/css/all.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:57 GMT
content-type: font/woff2
content-length: 109808
cache-control: public, max-age=43200
expires: Mon, 06 May 2024 16:46:32 GMT
etag: "1acf0-66360015-373ac5;;;"
last-modified: Sat, 04 May 2024 09:29:57 GMT
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 693
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tAiXAbZrrnEFh8PEqjkhJBvGUAeQ2yGvuXExGEKEIXaQJLT%2BP0I27Ux9Ef2lMEd%2B2XCkP53pGZDKHzBzaSnnuRd7BODr9oA9OvmWmAG27f2IdcsRwdOrRv421j%2FRZmeIjK4P8Cw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c25cf09c2b50f-OSL
|
|
| proftrafficcounter.com/stats |  3.124.83.201 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP3.124.83.201:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hasha7b1e2f04f6d3af19492318d734c25c5 c3c2f89e7937ee4ccc83cc0c491a6e81bb35d38d d89e5c77f566573f7cbed5b520364fe3bf3565ebbb9dbee7b271608e0eb327c7
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.firescalaf.cat
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 20:19:57 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.firescalaf.cat
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=c8b41912-413c-45aa-a450-f6ae39ed74c9:2:1; expires=Sat, 06 May 2034 20:19:57 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| www.firescalaf.cat/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 188.114.96.1 | 200 OK | 32 kB |
URL GET HTTP/3www.firescalaf.cat/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/javascript
etag: W/"15601-65f308ae-4ae21f;br"
last-modified: Thu, 14 Mar 2024 14:24:46 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 4350
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gBHVW75jgy8OgFW8rlZzrwxXmKiLFPTGoOniMPWpySMhlxcAVznPzuYwSWOA3BnIkKJmXXCFT%2FqA8CXt6FZ872XxPkJ0ayNy1JPDn2OxTMzxzRcOeHKOWUIYio%2Bs4mWw8Mp778c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c60834b50f-OSL
content-encoding: br
|
|
| proftrafficcounter.com/stats | 3.124.83.201 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP3.124.83.201:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash695ef82bd92ec15367a14735669522d7 1655916dc836ad334662045afa2a2268029e10cc add6978cd26c4bb08caac49939240923a0169b4e67ec2300e8a15525711ea213
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.firescalaf.cat
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 20:19:58 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.firescalaf.cat
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=f2877b3c-58d8-460d-8ef3-f244069f1152:2:1; expires=Sat, 06 May 2034 20:19:58 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f50e.svg | 192.0.77.48 | 200 OK | 453 B |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f50e.svg IP192.0.77.48:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash0477c6a43026315dd623bc6367e18acb 52b5e36d3d76b94ae900250691a64bdbfadad568 046dfa6a2f728366e86475c43a060898ffcd1fa9ac954c16ce792347dbb76532
GET /images/core/emoji/15.0.3/svg/1f50e.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 20:19:58 GMT
content-type: image/svg+xml
content-length: 453
last-modified: Tue, 30 Jan 2024 01:21:10 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 1
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| abodedistributionpan.com/4b/bc/23/4bbc23a92db768bab73820890bd8fa3d.js | 172.240.108.76 | 200 OK | 30 kB |
URL GET HTTP/1.1abodedistributionpan.com/4b/bc/23/4bbc23a92db768bab73820890bd8fa3d.js IP172.240.108.76:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectabodedistributionpan.com Fingerprint0A:F0:49:46:E9:89:77:CB:6E:7E:0C:A3:C6:E1:22:CA:19:69:A4:DC ValidityMon, 06 May 2024 08:18:50 GMT - Sun, 04 Aug 2024 08:18:49 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashea94b5cfa09295ba19761ca27d4b3cc4 054651a0cff773091af70927980d15c7d3501086 d6527b0e932d7aeb1ff2807e75df83607d829cec1d48a4bc33eff5e44450cb74
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /4b/bc/23/4bbc23a92db768bab73820890bd8fa3d.js HTTP/1.1
Host: abodedistributionpan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 20:19:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9ee97f48f1a76f973f14fa9e8824a252
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| www.firescalaf.cat/wp-content/themes/digital-newspaper/style.css?ver=1.1.9 | 188.114.96.1 | 200 OK | 34 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/themes/digital-newspaper/style.css?ver=1.1.9 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeUnicode text, UTF-8 text, with very long lines (7959) Hash9ccc05f13522331aab21bd950914d527 32177e94a273037915e8b41155e7d7a635c5996f 3fd8ba989229c43b26876379057c9a8ccee478deb992bca5f8ec56b70f03b99e
GET /wp-content/themes/digital-newspaper/style.css?ver=1.1.9 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=18579
alt-svc: h3=":443"; ma=86400
etag: W/"4893-66360015-373b25;br"
expires: Mon, 06 May 2024 06:03:19 GMT
last-modified: Sat, 04 May 2024 09:29:57 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 4350
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ky1UBPc5r%2BaCYVN8hTmnlorVYsn0SA3SH2vFE%2F8Kr%2FWQRqtNQDlJAFHfiEdI1pjyOFRH88grz1QdpFyH2a6FtSp%2FjMV88p9B8wlAGh%2F48qw3vuT2xWHRxvzi1z3zmXeor847N90%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c6081fb50f-OSL
content-encoding: br
|
|
| abodedistributionpan.com/watch.632327947425.js?key=9d3b448e547be241c68efc985e24dcc2&kw=%5B%22romain%22%2C%22virgo%22%2C%22and%22%2C%22his%22%2C%22wife%22%2C%22elizabeth%22%2C%22are%22%2C%22expecting%22%2C%22their%22%2C%22third%22%2C%22child%22%2C%22-%22%2C%22marktkauf%22%2C%22henstedt%22%2C%22ulzbur%22%5D&refer=https%3A%2F%2Fwww.firescalaf.cat%2F2024%2F05%2F07%2Fflafca%2FLry39E8140239NmU%2F&tz=0&dev=e&res=14.2071&uuid=c8b41912-413c-45aa-a450-f6ae39ed74c9%3A2%3A1 | 172.240.253.132 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1abodedistributionpan.com/watch.632327947425.js?key=9d3b448e547be241c68efc985e24dcc2&kw=%5B%22romain%22%2C%22virgo%22%2C%22and%22%2C%22his%22%2C%22wife%22%2C%22elizabeth%22%2C%22are%22%2C%22expecting%22%2C%22their%22%2C%22third%22%2C%22child%22%2C%22-%22%2C%22marktkauf%22%2C%22henstedt%22%2C%22ulzbur%22%5D&refer=https%3A%2F%2Fwww.firescalaf.cat%2F2024%2F05%2F07%2Fflafca%2FLry39E8140239NmU%2F&tz=0&dev=e&res=14.2071&uuid=c8b41912-413c-45aa-a450-f6ae39ed74c9%3A2%3A1 IP172.240.253.132:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectabodedistributionpan.com Fingerprint0A:F0:49:46:E9:89:77:CB:6E:7E:0C:A3:C6:E1:22:CA:19:69:A4:DC ValidityMon, 06 May 2024 08:18:50 GMT - Sun, 04 Aug 2024 08:18:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.632327947425.js?key=9d3b448e547be241c68efc985e24dcc2&kw=%5B%22romain%22%2C%22virgo%22%2C%22and%22%2C%22his%22%2C%22wife%22%2C%22elizabeth%22%2C%22are%22%2C%22expecting%22%2C%22their%22%2C%22third%22%2C%22child%22%2C%22-%22%2C%22marktkauf%22%2C%22henstedt%22%2C%22ulzbur%22%5D&refer=https%3A%2F%2Fwww.firescalaf.cat%2F2024%2F05%2F07%2Fflafca%2FLry39E8140239NmU%2F&tz=0&dev=e&res=14.2071&uuid=c8b41912-413c-45aa-a450-f6ae39ed74c9%3A2%3A1 HTTP/1.1
Host: abodedistributionpan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.firescalaf.cat
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Wed, 08 May 2024 20:19:58 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.firescalaf.cat
Access-Control-Allow-Origin: https://www.firescalaf.cat
Access-Control-Allow-Credentials: true
Location: https://abodedistributionpan.com/watch.632327947425.js?dev=e&key=9d3b448e547be241c68efc985e24dcc2&kw=%5B%22romain%22%2C%22virgo%22%2C%22and%22%2C%22his%22%2C%22wife%22%2C%22elizabeth%22%2C%22are%22%2C%22expecting%22%2C%22their%22%2C%22third%22%2C%22child%22%2C%22-%22%2C%22marktkauf%22%2C%22henstedt%22%2C%22ulzbur%22%5D&pst=1715199658&refer=https%3A%2F%2Fwww.firescalaf.cat%2F2024%2F05%2F07%2Fflafca%2FLry39E8140239NmU%2F&res=14.2071&rmtc=t&shu=deaa6c812a301e75493f5f00732c39b7e6eacf040ba60ade2c13ebba4f73bd6e90ef288b25218c4b51bbab86784c54a60d025d995e78b1919a75e92e242a9f0a3d83f50af8483b78d4d98db11186345fe45af69b5f9c0f18fc057338665f658a1e&tz=0&uuid=c8b41912-413c-45aa-a450-f6ae39ed74c9%3A2%3A1
Set-Cookie: u_pl=16664818; expires=Thu, 09 May 2024 20:19:58 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.LLdY0JpYkhuWTzavlSaNKgl0DitZziis94NzmWzjYfA; expires=Wed, 08 May 2024 20:20:58 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0dcd6649b6804c871be8685b6edea169
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| wansafeguard.com/watch.1037084138098.js?key=9d3b448e547be241c68efc985e24dcc2&kw=%5B%22romain%22%2C%22virgo%22%2C%22and%22%2C%22his%22%2C%22wife%22%2C%22elizabeth%22%2C%22are%22%2C%22expecting%22%2C%22their%22%2C%22third%22%2C%22child%22%2C%22-%22%2C%22marktkauf%22%2C%22henstedt%22%2C%22ulzbur%22%5D&refer=https%3A%2F%2Fwww.firescalaf.cat%2F2024%2F05%2F07%2Fflafca%2FLry39E8140239NmU%2F&tz=0&dev=e&res=14.2071&uuid=f2877b3c-58d8-460d-8ef3-f244069f1152%3A2%3A1 | 192.243.61.227 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1wansafeguard.com/watch.1037084138098.js?key=9d3b448e547be241c68efc985e24dcc2&kw=%5B%22romain%22%2C%22virgo%22%2C%22and%22%2C%22his%22%2C%22wife%22%2C%22elizabeth%22%2C%22are%22%2C%22expecting%22%2C%22their%22%2C%22third%22%2C%22child%22%2C%22-%22%2C%22marktkauf%22%2C%22henstedt%22%2C%22ulzbur%22%5D&refer=https%3A%2F%2Fwww.firescalaf.cat%2F2024%2F05%2F07%2Fflafca%2FLry39E8140239NmU%2F&tz=0&dev=e&res=14.2071&uuid=f2877b3c-58d8-460d-8ef3-f244069f1152%3A2%3A1 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectwansafeguard.com Fingerprint83:00:BB:A8:D5:FE:57:11:E3:EF:6F:5E:2E:29:2F:7A:BC:DC:D5:3D ValidityMon, 06 May 2024 12:58:51 GMT - Sun, 04 Aug 2024 12:58:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.1037084138098.js?key=9d3b448e547be241c68efc985e24dcc2&kw=%5B%22romain%22%2C%22virgo%22%2C%22and%22%2C%22his%22%2C%22wife%22%2C%22elizabeth%22%2C%22are%22%2C%22expecting%22%2C%22their%22%2C%22third%22%2C%22child%22%2C%22-%22%2C%22marktkauf%22%2C%22henstedt%22%2C%22ulzbur%22%5D&refer=https%3A%2F%2Fwww.firescalaf.cat%2F2024%2F05%2F07%2Fflafca%2FLry39E8140239NmU%2F&tz=0&dev=e&res=14.2071&uuid=f2877b3c-58d8-460d-8ef3-f244069f1152%3A2%3A1 HTTP/1.1
Host: wansafeguard.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.firescalaf.cat
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Wed, 08 May 2024 20:19:58 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.firescalaf.cat
Access-Control-Allow-Origin: https://www.firescalaf.cat
Access-Control-Allow-Credentials: true
Location: https://wansafeguard.com/watch.1037084138098.js?dev=e&key=9d3b448e547be241c68efc985e24dcc2&kw=%5B%22romain%22%2C%22virgo%22%2C%22and%22%2C%22his%22%2C%22wife%22%2C%22elizabeth%22%2C%22are%22%2C%22expecting%22%2C%22their%22%2C%22third%22%2C%22child%22%2C%22-%22%2C%22marktkauf%22%2C%22henstedt%22%2C%22ulzbur%22%5D&pst=1715199658&refer=https%3A%2F%2Fwww.firescalaf.cat%2F2024%2F05%2F07%2Fflafca%2FLry39E8140239NmU%2F&res=14.2071&rmtc=t&shu=595023dfa37fb74ddd74cc3b1d69c1059a67bbc9d3469b35c1df2e432f1805780094ab19db673d8e4d9d77a019901aa07a5a1856ebfb9389ac9e3e0f2ef25b60b0fb4fad1154799533a4701fb3fa70fdab40792e0b7e99e2e0f8bbcc53&tz=0&uuid=f2877b3c-58d8-460d-8ef3-f244069f1152%3A2%3A1
Set-Cookie: u_pl=16664818; expires=Thu, 09 May 2024 20:19:58 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.LLdY0JpYkhuWTzavlSaNKgl0DitZziis94NzmWzjYfA; expires=Wed, 08 May 2024 20:20:58 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3bebd6b526e6257fd388ad2e4b27b0b6
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| abodedistributionpan.com/watch.632327947425.js?dev=e&key=9d3b448e547be241c68efc985e24dcc2&kw=%5B%22romain%22%2C%22virgo%22%2C%22and%22%2C%22his%22%2C%22wife%22%2C%22elizabeth%22%2C%22are%22%2C%22expecting%22%2C%22their%22%2C%22third%22%2C%22child%22%2C%22-%22%2C%22marktkauf%22%2C%22henstedt%22%2C%22ulzbur%22%5D&pst=1715199658&refer=https%3A%2F%2Fwww.firescalaf.cat%2F2024%2F05%2F07%2Fflafca%2FLry39E8140239NmU%2F&res=14.2071&rmtc=t&shu=deaa6c812a301e75493f5f00732c39b7e6eacf040ba60ade2c13ebba4f73bd6e90ef288b25218c4b51bbab86784c54a60d025d995e78b1919a75e92e242a9f0a3d83f50af8483b78d4d98db11186345fe45af69b5f9c0f18fc057338665f658a1e&tz=0&uuid=c8b41912-413c-45aa-a450-f6ae39ed74c9%3A2%3A1 | 172.240.108.76 | 200 OK | 2.0 kB |
URL GET HTTP/1.1abodedistributionpan.com/watch.632327947425.js?dev=e&key=9d3b448e547be241c68efc985e24dcc2&kw=%5B%22romain%22%2C%22virgo%22%2C%22and%22%2C%22his%22%2C%22wife%22%2C%22elizabeth%22%2C%22are%22%2C%22expecting%22%2C%22their%22%2C%22third%22%2C%22child%22%2C%22-%22%2C%22marktkauf%22%2C%22henstedt%22%2C%22ulzbur%22%5D&pst=1715199658&refer=https%3A%2F%2Fwww.firescalaf.cat%2F2024%2F05%2F07%2Fflafca%2FLry39E8140239NmU%2F&res=14.2071&rmtc=t&shu=deaa6c812a301e75493f5f00732c39b7e6eacf040ba60ade2c13ebba4f73bd6e90ef288b25218c4b51bbab86784c54a60d025d995e78b1919a75e92e242a9f0a3d83f50af8483b78d4d98db11186345fe45af69b5f9c0f18fc057338665f658a1e&tz=0&uuid=c8b41912-413c-45aa-a450-f6ae39ed74c9%3A2%3A1 IP172.240.108.76:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectabodedistributionpan.com Fingerprint0A:F0:49:46:E9:89:77:CB:6E:7E:0C:A3:C6:E1:22:CA:19:69:A4:DC ValidityMon, 06 May 2024 08:18:50 GMT - Sun, 04 Aug 2024 08:18:49 GMT
File typeJavaScript source, ASCII text, with very long lines (2470) Hash7e2b61726df04fab208025e38bf8b67c 648524f0768cdcb14a022f35635d82096c93febc 73f2dd64ad2e27aa2b9d1f4e1af203b100d94e009991a029b4e57b0ed54f1585
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.632327947425.js?dev=e&key=9d3b448e547be241c68efc985e24dcc2&kw=%5B%22romain%22%2C%22virgo%22%2C%22and%22%2C%22his%22%2C%22wife%22%2C%22elizabeth%22%2C%22are%22%2C%22expecting%22%2C%22their%22%2C%22third%22%2C%22child%22%2C%22-%22%2C%22marktkauf%22%2C%22henstedt%22%2C%22ulzbur%22%5D&pst=1715199658&refer=https%3A%2F%2Fwww.firescalaf.cat%2F2024%2F05%2F07%2Fflafca%2FLry39E8140239NmU%2F&res=14.2071&rmtc=t&shu=deaa6c812a301e75493f5f00732c39b7e6eacf040ba60ade2c13ebba4f73bd6e90ef288b25218c4b51bbab86784c54a60d025d995e78b1919a75e92e242a9f0a3d83f50af8483b78d4d98db11186345fe45af69b5f9c0f18fc057338665f658a1e&tz=0&uuid=c8b41912-413c-45aa-a450-f6ae39ed74c9%3A2%3A1 HTTP/1.1
Host: abodedistributionpan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.firescalaf.cat
Referer: https://www.firescalaf.cat/
DNT: 1
Connection: keep-alive
Cookie: u_pl=16664818; ain=eyJhbGciOiJIUzI1NiJ9.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.LLdY0JpYkhuWTzavlSaNKgl0DitZziis94NzmWzjYfA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 20:19:58 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.firescalaf.cat
Access-Control-Allow-Origin: https://www.firescalaf.cat
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=c8b41912-413c-45aa-a450-f6ae39ed74c9:2:1; expires=Wed, 15 May 2024 20:19:58 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 09 May 2024 20:19:58 GMT; secure; SameSite=None
uncs=1; expires=Thu, 09 May 2024 20:19:58 GMT; secure; SameSite=None
pdhtkv5=true; expires=Thu, 09 May 2024 20:19:58 GMT; secure; SameSite=None
uncs5=1; expires=Thu, 09 May 2024 20:19:58 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6160b8f711a337003d04e27809e3a68d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| wansafeguard.com/watch.1037084138098.js?dev=e&key=9d3b448e547be241c68efc985e24dcc2&kw=%5B%22romain%22%2C%22virgo%22%2C%22and%22%2C%22his%22%2C%22wife%22%2C%22elizabeth%22%2C%22are%22%2C%22expecting%22%2C%22their%22%2C%22third%22%2C%22child%22%2C%22-%22%2C%22marktkauf%22%2C%22henstedt%22%2C%22ulzbur%22%5D&pst=1715199658&refer=https%3A%2F%2Fwww.firescalaf.cat%2F2024%2F05%2F07%2Fflafca%2FLry39E8140239NmU%2F&res=14.2071&rmtc=t&shu=595023dfa37fb74ddd74cc3b1d69c1059a67bbc9d3469b35c1df2e432f1805780094ab19db673d8e4d9d77a019901aa07a5a1856ebfb9389ac9e3e0f2ef25b60b0fb4fad1154799533a4701fb3fa70fdab40792e0b7e99e2e0f8bbcc53&tz=0&uuid=f2877b3c-58d8-460d-8ef3-f244069f1152%3A2%3A1 | 192.243.59.20 | 200 OK | 2.0 kB |
URL GET HTTP/1.1wansafeguard.com/watch.1037084138098.js?dev=e&key=9d3b448e547be241c68efc985e24dcc2&kw=%5B%22romain%22%2C%22virgo%22%2C%22and%22%2C%22his%22%2C%22wife%22%2C%22elizabeth%22%2C%22are%22%2C%22expecting%22%2C%22their%22%2C%22third%22%2C%22child%22%2C%22-%22%2C%22marktkauf%22%2C%22henstedt%22%2C%22ulzbur%22%5D&pst=1715199658&refer=https%3A%2F%2Fwww.firescalaf.cat%2F2024%2F05%2F07%2Fflafca%2FLry39E8140239NmU%2F&res=14.2071&rmtc=t&shu=595023dfa37fb74ddd74cc3b1d69c1059a67bbc9d3469b35c1df2e432f1805780094ab19db673d8e4d9d77a019901aa07a5a1856ebfb9389ac9e3e0f2ef25b60b0fb4fad1154799533a4701fb3fa70fdab40792e0b7e99e2e0f8bbcc53&tz=0&uuid=f2877b3c-58d8-460d-8ef3-f244069f1152%3A2%3A1 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectwansafeguard.com Fingerprint83:00:BB:A8:D5:FE:57:11:E3:EF:6F:5E:2E:29:2F:7A:BC:DC:D5:3D ValidityMon, 06 May 2024 12:58:51 GMT - Sun, 04 Aug 2024 12:58:50 GMT
File typeJavaScript source, ASCII text, with very long lines (2453) Hash10d6e320518e8b64d63d3e4b2963411c 7b6e6d14b04c3de499ce7cb965c96d33a3d9e49e a02a8cd64e50406dc4603a1dfa68db91a197dbec9df0f9db1211330d41ed7bc1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.1037084138098.js?dev=e&key=9d3b448e547be241c68efc985e24dcc2&kw=%5B%22romain%22%2C%22virgo%22%2C%22and%22%2C%22his%22%2C%22wife%22%2C%22elizabeth%22%2C%22are%22%2C%22expecting%22%2C%22their%22%2C%22third%22%2C%22child%22%2C%22-%22%2C%22marktkauf%22%2C%22henstedt%22%2C%22ulzbur%22%5D&pst=1715199658&refer=https%3A%2F%2Fwww.firescalaf.cat%2F2024%2F05%2F07%2Fflafca%2FLry39E8140239NmU%2F&res=14.2071&rmtc=t&shu=595023dfa37fb74ddd74cc3b1d69c1059a67bbc9d3469b35c1df2e432f1805780094ab19db673d8e4d9d77a019901aa07a5a1856ebfb9389ac9e3e0f2ef25b60b0fb4fad1154799533a4701fb3fa70fdab40792e0b7e99e2e0f8bbcc53&tz=0&uuid=f2877b3c-58d8-460d-8ef3-f244069f1152%3A2%3A1 HTTP/1.1
Host: wansafeguard.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.firescalaf.cat
Referer: https://www.firescalaf.cat/
DNT: 1
Connection: keep-alive
Cookie: u_pl=16664818; ain=eyJhbGciOiJIUzI1NiJ9.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.LLdY0JpYkhuWTzavlSaNKgl0DitZziis94NzmWzjYfA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 20:19:58 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.firescalaf.cat
Access-Control-Allow-Origin: https://www.firescalaf.cat
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=f2877b3c-58d8-460d-8ef3-f244069f1152:2:1; expires=Wed, 15 May 2024 20:19:58 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 09 May 2024 20:19:58 GMT; secure; SameSite=None
uncs=1; expires=Thu, 09 May 2024 20:19:58 GMT; secure; SameSite=None
pdhtkv5=true; expires=Thu, 09 May 2024 20:19:58 GMT; secure; SameSite=None
uncs5=1; expires=Thu, 09 May 2024 20:19:58 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f6562f0b8035f7447e681691b5b55750
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| restedfeatures.com/pixel/purst?dl=0&th=0&sc=0&rs=2456&rd=2456&fd=561&bv=24.5.6485&tmpl=136 | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1restedfeatures.com/pixel/purst?dl=0&th=0&sc=0&rs=2456&rd=2456&fd=561&bv=24.5.6485&tmpl=136 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectrestedfeatures.com Fingerprint99:6A:08:24:87:8D:99:4B:3C:DF:AF:B1:28:8C:E3:55:1C:28:74:EA ValidityMon, 06 May 2024 12:47:15 GMT - Sun, 04 Aug 2024 12:47:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/purst?dl=0&th=0&sc=0&rs=2456&rd=2456&fd=561&bv=24.5.6485&tmpl=136 HTTP/1.1
Host: restedfeatures.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 20:19:58 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.cloudimagesb.com/cti/db/04/f2/db04f2d410def3c342c74e9de83add61/1707890194.png | 45.133.44.10 | 200 OK | 30 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/db/04/f2/db04f2d410def3c342c74e9de83add61/1707890194.png IP45.133.44.10:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typePNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced Hashb5a180cd928ed902fcd1a741e1bf375b 615cbed475b60a7550f1388229ecdf119eafd453 e70abe4c247ee312f17cffaaef0894eb9fcfa10686a9c66cd74875c26d98d7ae
GET /cti/db/04/f2/db04f2d410def3c342c74e9de83add61/1707890194.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 20:19:58 GMT
content-type: image/png
content-length: 30045
server: nginx/1.21.6
last-modified: Wed, 14 Feb 2024 05:56:44 GMT
etag: "65cc561c-755d"
expires: Fri, 10 May 2024 20:19:58 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.cloudimagesb.com/cti/7d/77/a2/7d77a2636ed6c3c92f428e166d024bfe/1707813818.png | 45.133.44.10 | 200 OK | 140 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/7d/77/a2/7d77a2636ed6c3c92f428e166d024bfe/1707813818.png IP45.133.44.10:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typePNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced Size140 kB (139767 bytes) Hash966bed299453e601c8406eedb711fdf8 84186a42e8ca60c25e756222d0a2f9197a7f4786 3516e8b320223c89168e9ef12182f06c7cfd8c9c2c5dc11e7a20a02da9b5984f
GET /cti/7d/77/a2/7d77a2636ed6c3c92f428e166d024bfe/1707813818.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 20:19:58 GMT
content-type: image/png
content-length: 139767
server: nginx/1.21.6
last-modified: Tue, 13 Feb 2024 08:43:47 GMT
etag: "65cb2bc3-221f7"
expires: Fri, 10 May 2024 20:19:58 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.firescalaf.cat/favicon.ico | 188.114.96.1 | 200 OK | 2 B |
URL GET HTTP/3www.firescalaf.cat/favicon.ico IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
Hash309fc7d3bc53bb63ac42e359260ac740 2064f80f811db79a33c4e51c10221454e30c74ae ac11339ffa8f270c4f781e0a3922bb1c80d9dee6e4b6911ca34538ed9ae03caa
GET /favicon.ico HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=f2877b3c-58d8-460d-8ef3-f244069f1152%3A2%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:58 GMT
content-type: text/html; charset=UTF-8
link: <https://www.firescalaf.cat/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache-control: public,max-age=604800
x-litespeed-tag: ea0_HTTP.200,ea0_default,ea0_URL.b54ff2eddcb0060bcd786ce388d8d4d7,ea0_
x-litespeed-cache: miss
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 3897
last-modified: Wed, 08 May 2024 19:15:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RzrsrZEwg70KKXhjJPH30xrc%2BNMFImW9JVedTUzRS0a%2FUp4l2OFTPegni5v8HMGkwKp64A8bhMclHy%2FlCnJVx64fHdsLMPvqowiPb%2BxCND9NBtS91iv%2BYCDimCH0hilkZGzMX%2FY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c25d44c2eb50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 188.114.96.1 | 200 OK | 12 kB |
URL GET HTTP/3www.firescalaf.cat/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/javascript
etag: W/"3509-65f308ad-4ae217;br"
last-modified: Thu, 14 Mar 2024 14:24:45 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 4350
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZmWqU9Uv%2B6%2F9ACNNdjMPDm5k5HIbroTDMh%2FcWjc3HJaExteXUQgdzRd8iyz9uvsAaicV19yrW49obU5tPENpRLpFz49PlrilowM%2FoFszhPJ0ymZ4W0StAdkREQqa49AV9limWwk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c60838b50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/css/main.css?ver=1.1.9 | 188.114.96.1 | 200 OK | 153 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/css/main.css?ver=1.1.9 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
Size153 kB (153392 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/digital-newspaper/assets/css/main.css?ver=1.1.9 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=191330
alt-svc: h3=":443"; ma=86400
etag: W/"2eb62-66360015-373aa1;br"
expires: Mon, 06 May 2024 06:03:19 GMT
last-modified: Sat, 04 May 2024 09:29:57 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 4350
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m4yReC%2FkRyWRZ0jH82T9VvS%2FHBCGGIwbHgaNuUECPfEchQpN36NpzSvII%2BnejzPQDvQ5ivEx9bsuwSWilXaR%2F10nLUlV5dKYy%2FTaWnP2ScZe2OHR7HX2Vt3P9%2Foq0AAbs4U65bY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c60825b50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/js/theme.js?ver=1.1.9 | 188.114.96.1 | 200 OK | 20 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/js/theme.js?ver=1.1.9 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeJavaScript source, ASCII text Hash4d59e6a1242ee503e3e819c7b89450a4 c905ec6ee921cd3f3ef76dcfed47fce7339183bd fedd219c522c30e2a99b2267cae67c639e87c522ff8ea3c5166b354ef09b4676
GET /wp-content/themes/digital-newspaper/assets/js/theme.js?ver=1.1.9 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/javascript
etag: W/"4fdb-66360015-373ac1;br"
last-modified: Sat, 04 May 2024 09:29:57 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 3677
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ydQtyV8DY0Pq0wj0ZfERIsGE7XhU1X%2Bbfb6CS0oMEX3i8wj05%2BTHm%2FXP%2BkKfuKBeka1Mz8DPmMA%2BUQJ%2BwubsSV3RRNLJHLu5%2BB0Cha%2B6AhsebPXOUMEE8x2FD1LRjgzqddRSzqA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c6186cb50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/js/navigation.js?ver=1.1.9 | 188.114.96.1 | 200 OK | 5.5 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/js/navigation.js?ver=1.1.9 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeJavaScript source, ASCII text, with very long lines (5995), with no line terminators Hash7af9272b02850271e3824c155cd51693 6840ad26eb470ce596af31d9daa75a8817edd5ba 76a70d878bc70d4db3b428ef33288b9355107de805c78b385c155cb1748338df
GET /wp-content/themes/digital-newspaper/assets/js/navigation.js?ver=1.1.9 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/javascript
etag: W/"1591-66360015-373ac0;br"
last-modified: Sat, 04 May 2024 09:29:57 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 3677
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xB5AeHgX1%2BsElfAVC9z0bgUi5ep%2FQsDRpF97Xd38ZJezlGGraZ8lCdh45QCfKEKWhCRE240bLE4VNRIBAcbSzMk%2B0JnIlA%2BRYwa80VooM2fUiMm1H8wG1QbfQwtV0sPUe27Vag4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c61867b50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ | 188.114.96.1 | 200 OK | 59 kB |
URL User Request GET HTTP/2www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ IP188.114.96.1:443
CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2024/05/07/flafca/Lry39E8140239NmU/ HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/html; charset=UTF-8
link: <https://www.firescalaf.cat/wp-json/>; rel="https://api.w.org/", <https://www.firescalaf.cat/wp-json/wp/v2/posts/14023>; rel="alternate"; type="application/json", <https://www.firescalaf.cat/?p=14023>; rel=shortlink
vary: Accept-Encoding
x-litespeed-cache: hit
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gxmogtUr7ff0wq3mt6%2F8aPLAU9D%2BODUF%2BJ%2BagwY00NL4qAbCrVdkh4w1G%2Fp14zO0JTZVD9Pnp34jHs5c4GgxVIGNRg1NDoIaA5jec7idisBjaHejFyLdTAr33vIfgdiLVeKfTR8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c25d64b4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| unseenreport.com/pxf.gif?uuid=f2877b3c-58d8-460d-8ef3-f244069f1152&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=4bbc23a92db768bab73820890bd8fa3d&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=f2877b3c-58d8-460d-8ef3-f244069f1152&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=4bbc23a92db768bab73820890bd8fa3d&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=f2877b3c-58d8-460d-8ef3-f244069f1152&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=4bbc23a92db768bab73820890bd8fa3d&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 20:19:59 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 89e932cd9e433d98f6f03abba4db2c9a
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/css/loader.css?ver=1.1.9 | 188.114.96.1 | 200 OK | 23 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/css/loader.css?ver=1.1.9 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeASCII text, with very long lines (22916), with no line terminators Hash8516617edfaf2b38b043afb3d0ccdb93 a10c554d9663f60ed5e9e7a69a4130502094e6af 141f01baae5adcc00c31c36a4797ccc03e920204f473319cf65529723c19baf9
GET /wp-content/themes/digital-newspaper/assets/css/loader.css?ver=1.1.9 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=28437
alt-svc: h3=":443"; ma=86400
etag: W/"6f15-66360015-373aa0;br"
expires: Mon, 06 May 2024 06:03:19 GMT
last-modified: Sat, 04 May 2024 09:29:57 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 4351
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ARPFCgidtmI%2BvBNRf8%2F0uIJfs7kZ8Y53u7AJwnswSb4a0Ubweph5nfO5d%2FbG6B%2FBqZBhk1kWq2XEiVkrYoJKe9vpO8Kt9zyMX72HBEIlijelmCVl321B8ogE921dUTp6eWgNbZ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c6082bb50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/waypoint/jquery.waypoint.min.js?ver=4.0.1 | 188.114.96.1 | 200 OK | 9.0 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/waypoint/jquery.waypoint.min.js?ver=4.0.1 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (9137), with no line terminators Hashdbfe0e29e5089a3a46930f0df243c803 2dff052eb87ed427d52506019121836fa1c59600 e918ad22c5be15ed92178b1eef17639915fb2c9f68d12454904d2baf5b797c72
GET /wp-content/themes/digital-newspaper/assets/lib/waypoint/jquery.waypoint.min.js?ver=4.0.1 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/javascript
etag: W/"2344-66360015-373ad4;br"
last-modified: Sat, 04 May 2024 09:29:57 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 3677
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AdpZfh0ORKpXCTl1BGJwQ5oh%2FOnUHnDIyGaqrD4BWZoIdC4EPQjF%2FQ%2FVd%2FRYuqrMRnNt5%2F9Lgz3EPazHy7bb2SX3MiPETg0CNXxTQbsnepUkSMStsdx%2FQRZvL%2FQhDz3PRyD76n8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c62878b50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/wp-content/fonts/95bfe4f26defe848c6336754a283badb.css | 188.114.96.1 | 200 OK | 13 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/fonts/95bfe4f26defe848c6336754a283badb.css IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeASCII text, with very long lines (13144), with no line terminators Hash1101204f3a5da3dae36f6c00b4fb05a6 65a715fc8703f2927582f7a255619afc0c9ebd2a 724d3553877a2f1c4ea49e21e54eeaf6914ab7e9b1c57f0e22faa0535002c506
GET /wp-content/fonts/95bfe4f26defe848c6336754a283badb.css HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=15454
alt-svc: h3=":443"; ma=86400
etag: W/"3c5e-6637aa44-276025;br"
expires: Mon, 06 May 2024 06:03:19 GMT
last-modified: Sun, 05 May 2024 15:48:20 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 4350
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QX%2F7AL3iGkoo2QKrOswF0%2F%2B%2Bb35d%2BbaRS%2FWFtfGQHwqfkbt9I0cW%2B1FKptv7xLyoBLGPcsaDA2TR6%2FZed%2BstDcqFuj520zBRXrUGZz%2F6lEGZd5AM7RlCn0deUDHvF%2Bv0qTSeH2o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c5f81cb50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/css/responsive.css?ver=1.1.9 | 188.114.96.1 | 200 OK | 13 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/css/responsive.css?ver=1.1.9 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeASCII text, with very long lines (12611), with no line terminators Hash9bfd1bf5fea0654bca0ccbe71b1f5d55 9a7224f1d367b0e7c844143a80466e783f3517f5 6b388ede016ed45a9ee5a3373309f93a987c6333c39088e3b5dff0e813dc70d3
GET /wp-content/themes/digital-newspaper/assets/css/responsive.css?ver=1.1.9 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=15027
alt-svc: h3=":443"; ma=86400
etag: W/"3ab3-66360015-373aa2;br"
expires: Mon, 06 May 2024 06:03:19 GMT
last-modified: Sat, 04 May 2024 09:29:57 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 4350
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c%2Fb%2FTbmXwhyR%2FI0NDihA08mfl94URICSwpqOLfJnF%2FGcJFJQm57wfuUgOytf8UXXGbWjMtpIWO4uZIAZwMGUPI6SUi2btThU2CmkoWR9ZrnhTy1IJfcXuppO4eFBAjm9Pm9jv9Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c6082eb50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/css/add.css?ver=1.1.9 | 188.114.96.1 | 200 OK | 6.4 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/css/add.css?ver=1.1.9 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeASCII text, with very long lines (6438), with no line terminators Hashe84a00db8cbfdccafcf0f4bea8b4872f 7a24aa5083e290d208959d67ec74ce9af722292a 4f16b722ed4b514a2580262244802a2096a8abadf48a13db8cf2d07816f31a0f
GET /wp-content/themes/digital-newspaper/assets/css/add.css?ver=1.1.9 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=7876
alt-svc: h3=":443"; ma=86400
etag: W/"1ec4-66360015-373a9f;br"
expires: Mon, 06 May 2024 06:03:19 GMT
last-modified: Sat, 04 May 2024 09:29:57 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 4350
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TznDRWw9ky3uahqusrIQxem8D6cc2aRq%2Bd3uoivq3%2Byn7t9jDCOZ4e5V4fzplCEsDIx7qxgmKzh68PaETwBdh3uZ8BpGfEN01Mg0o6nmuVFFe9ajCgay0HZxHB4Eh9hQ1LUJ5A8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c60827b50f-OSL
content-encoding: br
|
|
| wansafeguard.com/4b/bc/23/4bbc23a92db768bab73820890bd8fa3d.js | 192.243.59.20 | 200 OK | 84 kB |
URL GET HTTP/1.1wansafeguard.com/4b/bc/23/4bbc23a92db768bab73820890bd8fa3d.js IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectwansafeguard.com Fingerprint83:00:BB:A8:D5:FE:57:11:E3:EF:6F:5E:2E:29:2F:7A:BC:DC:D5:3D ValidityMon, 06 May 2024 12:58:51 GMT - Sun, 04 Aug 2024 12:58:50 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hasha02af35143c905231b409dca94da3871 2a64ad2a24e9f7e2a6672b9ce11d85fbd4119395 e4fe5c86e27aeb0d42e11792f7fd9028e22c620cb7885e703b141c875f96e5d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /4b/bc/23/4bbc23a92db768bab73820890bd8fa3d.js HTTP/1.1
Host: wansafeguard.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 20:19:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b3863aa288279a6b9b168c5c9f4244a9
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/slick/slick.css?ver=1.8.1 | 188.114.96.1 | 200 OK | 1.3 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/themes/digital-newspaper/assets/lib/slick/slick.css?ver=1.8.1 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeASCII text, with very long lines (1330), with no line terminators Hashd5adc4dc64f673ce6a0d5801e5339622 237b571c0d849c7d42eb942724eb29a91803ed74 21061765237c66c10b48e236063a3497c22d33629e98f8654d1a3b860fa48700
GET /wp-content/themes/digital-newspaper/assets/lib/slick/slick.css?ver=1.8.1 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/css
cache-control: public, max-age=43200
cf-bgj: minify
cf-polished: origSize=1776
alt-svc: h3=":443"; ma=86400
etag: W/"6f0-66360015-373ad0;br"
expires: Mon, 06 May 2024 06:03:19 GMT
last-modified: Sat, 04 May 2024 09:29:57 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 4350
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kF%2FMsvCtokG%2BivzbmpBePp90QyNQQclVEp4mD6YH6Dwwvn0yglaQRYPBxmo6Nk%2F8KksEWEk5%2FE3yESV%2BkhdIpDb2hd4piSLjI4zI1USFt2LEkrjUcSlStCi39PPjHm2Ztq4D7Sc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c5f815b50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/wp-content/plugins/wp-automatic/js/main-front.js?ver=6.5.3 | 188.114.96.1 | 200 OK | 1.0 kB |
URL GET HTTP/3www.firescalaf.cat/wp-content/plugins/wp-automatic/js/main-front.js?ver=6.5.3 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeJavaScript source, ASCII text, with very long lines (1092), with no line terminators Hashcb9255d8f9b56663038c8fb95c3ccd21 465ae30e920f88dc421d065a348c5f0d75a0af5f 1e1c484d9c4ccc48ff66e0d2e1504fd9e22cb3efdb567b0dd1deeaac5ee0ff21
GET /wp-content/plugins/wp-automatic/js/main-front.js?ver=6.5.3 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:56 GMT
content-type: text/javascript
etag: W/"3f9-660d8c51-3743d0;br"
last-modified: Wed, 03 Apr 2024 17:05:21 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 4350
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uYiDOD6B8BNLGrpOQ9cmgx77h4fmGlTDRIGhuFCQXCNO%2BYqha47qHVu2oGMobWeDBXCiWMQzMY1qlCMzJq8Ug%2BUsAWQnPXeHYcPV3q0EBGvI%2BmNchh%2BupOVnKsWgT01cQd3pXHk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25c61853b50f-OSL
content-encoding: br
|
|
| www.firescalaf.cat/wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 | 188.114.96.1 | 200 OK | 19 kB |
URL GET HTTP/3www.firescalaf.cat/wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectfirescalaf.cat Fingerprint4E:24:54:D9:CD:67:13:3E:2C:DB:E6:ED:E0:F1:23:21:CE:24:BD:63 ValiditySun, 05 May 2024 14:43:38 GMT - Sat, 03 Aug 2024 14:43:37 GMT
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 HTTP/1.1
Host: www.firescalaf.cat
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 20:19:57 GMT
content-type: text/javascript
etag: W/"4926-660cbe00-4ae154;br"
last-modified: Wed, 03 Apr 2024 02:25:04 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 3289
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s69BYMLY4yC1RplWzsnVN9SFgiBXRGt5PnAFZ8YhOhoQ7FRD4QHfLhc6qlPhZ9dikKmnoWZHNv9rBtlVureeKrvkxVF1T9o2irpUSy38OVf4DuS%2BxvW%2FsvECav0LOYlU9OSDZ4A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c25cf4a18b50f-OSL
content-encoding: br
|
|
| downstairsnegotiatebarren.com/sfp.js | 188.114.96.1 | 200 OK | 86 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP188.114.96.1:443
Requested byhttps://www.firescalaf.cat/2024/05/07/flafca/Lry39E8140239NmU/ CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint5D:DB:CB:C6:CE:2A:8B:34:7D:BC:43:74:33:1D:5F:77:48:F7:BC:1B ValidityThu, 02 May 2024 21:26:34 GMT - Wed, 31 Jul 2024 21:26:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.firescalaf.cat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 20:19:58 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 35bdd8453e2fd446272d20a026b70da3
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 08 May 2024 20:19:58 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WLo9NC%2Fdwh%2BjGqedc2UTRpnciE8OIhlS8COC%2FYSguvi85SdVLjf%2FiZ1g8VggaP%2FK4aAhl0fesSau4Gv8qzHJeIJQh2eeT77VKV7eQvVxvLVsErttXccdaNrUjLsq%2Btw5fppshfAISd%2BejQH9co2VTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c25d1b97e569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|