| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css | 104.17.24.14 | | 5.9 kB |
URL cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css IP 104.17.24.14:0
File typetroff or preprocessor input, ASCII text, with very long lines (372) Hashc495654869785bc3df60216616814ad1 0140952c64e3f2b74ef64e050f2fe86eab6624c8 36e0a7e08bee65774168528938072c536437669c1b7458ac77976ec788e4439c
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 23:05:13 GMT
content-type: text/css; charset=utf-8
content-length: 5884
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-9226"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 275223
expires: Wed, 23 Apr 2025 23:05:13 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lB86sKM9WKD6w%2Fk%2FXsg7YwNw%2BRl%2Fwz0XVYDk3Ptqipo1V%2FdsAezFvHIh0NwTNcfI6i8g%2Fe20cdLfVeSMmIke%2Fpe83tKfFO%2FnYgEycVk%2F9KTJkhQXA3ALPqdnuSlWkkrs8yRSjXM1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87e3e5018af11c0a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/bootstrap/4.6.0/js/bootstrap.min.js | 104.17.24.14 | | 13 kB |
URL cdnjs.cloudflare.com/ajax/libs/bootstrap/4.6.0/js/bootstrap.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (63188) Hashf0c2bcf5ef0c4476508d79ec9cdcce07 3beed68ed7d753c6bf4f61c26386ddd7929ba030 edd03b96ae4ff7886406c59d7dfeeaa1b624a7da297bf2f92d0cb6b7f9633cba
GET /ajax/libs/bootstrap/4.6.0/js/bootstrap.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 23:05:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 13132
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60f698d0-334c"
last-modified: Tue, 20 Jul 2021 09:35:12 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 266082
expires: Wed, 23 Apr 2025 23:05:13 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Etqw3QLE1slbfeFCxS7CraxUDNv8O%2FPItYVRliyF6U69Yj4aJsklmsWO9FEvbGS%2F6lYIvWaOVsEOkXOQlmRr4%2BgFFEIHKSGve45mnIvhJ8BR2NaZxtz7%2BI4UgGDA5IgmsVeHMDyo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87e3e5018af01c0a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/bootstrap/4.6.0/css/bootstrap.min.css | 104.17.24.14 | | 18 kB |
URL cdnjs.cloudflare.com/ajax/libs/bootstrap/4.6.0/css/bootstrap.min.css IP 104.17.24.14:0
File typeASCII text, with very long lines (65326) Hashd432e4222814b62dd30c9513dcc29440 2cac4afc120983921411296bd4e8fd8a94ba237e 4ffcc598ee6cff4692c1cea272cd8a2f195f6dec32473e94370d6cdcfa5fe601
GET /ajax/libs/bootstrap/4.6.0/css/bootstrap.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 23:05:13 GMT
content-type: text/css; charset=utf-8
content-length: 17764
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60f698d0-4564"
last-modified: Tue, 20 Jul 2021 09:35:12 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 196745
expires: Wed, 23 Apr 2025 23:05:13 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ncgwBaMl%2FUvU6k9Y%2BM4KHaCq%2FTwDv%2FwAT3XXiBlmo6U99q9SYzrVLpmp9tgD1Qrt3yESNTF6qXA7WHogQ1ot3o2LoUy9hMR4CT12CtBVtj%2B0MvIdfrxHKbdiBw7gkG22Bq8%2FdI0t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87e3e501eb2e1c0a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js | 142.250.74.170 | | 31 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 142.250.74.170:0
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 15:45:31 GMT
expires: Fri, 02 May 2025 15:45:31 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 112782
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| wpclick.cc/BivvkqDW/index_files/themecustom.css | 104.21.54.148 | | 4.3 kB |
URL wpclick.cc/BivvkqDW/index_files/themecustom.css IP 104.21.54.148:0
Hashaf540936f27a17aea4b34dc509d23722 6299fa1dbfc16ac3fdb606782a7eef48c8a2209e 08518b3c4658a2774fb259fbe8dd1c3de406cebb928b63725e57b4e16a3bef99
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /BivvkqDW/index_files/themecustom.css HTTP/1.1
Host: wpclick.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Fri, 03 May 2024 23:05:13 GMT
content-type: text/html
location: https://wpclick.cc/motwales/index_files/themecustom.css
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lxZSJv8AyowQB0Ix2O416UtZj2YEXpxnWCOvGaGbtAWn3qkA3Zyw2XbKGMrF1UF1SgG6T5Kvm5ZWiXO08ZdOQ4DxAY%2FLB7J2QRKKC%2FrFEv1rthTL9IcwrtyDCTVf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e3e5012d81568d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.onesignal.com/sdks/OneSignalSDK.js | 104.17.111.223 | | 11 kB |
URL cdn.onesignal.com/sdks/OneSignalSDK.js IP 104.17.111.223:0
File typeJavaScript source, ASCII text, with very long lines (9163) Hasha87c48d211877c49b878679b2e3cdab8 e75653dd0156806682e39abe8b1323ed40d840ca 4191d89ec03bce5dc273716075335e31851031184b0fff0ab9fc900a8442019f
GET /sdks/OneSignalSDK.js HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 23:05:13 GMT
content-type: application/javascript
etag: W/"a87c48d211877c49b878679b2e3cdab8"
access-control-allow-headers: OneSignal-Subscription-Id
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2246
expires: Mon, 06 May 2024 23:05:13 GMT
cache-control: public, max-age=259200
set-cookie: __cf_bm=E.wfTDpwYXRQNR07vTwrruuIU2fpzz34KdbKDWo63cg-1714777513-1.0.1.1-YDBLPYQ3BLZZeToIOuZT0xhtiGEzv9z_7y3rT_XT4sFI.MkKoj5AK4sNF6SinhTMx.po.CLNGxgDFQl2tIgdsA; path=/; expires=Fri, 03-May-24 23:35:13 GMT; domain=.onesignal.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 87e3e5021faab500-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| wpclick.cc/BivvkqDW/index_files/config.js | 104.21.54.148 | | 14 kB |
URL wpclick.cc/BivvkqDW/index_files/config.js IP 104.21.54.148:0
Hashff6b22050328b34f4f12c4e3beb71341 d6cf21a6e560debd4c18bdd927d4fc004d549ef0 eb611ecd31dd9e4541d73ea0768f470e18cb8792718f99775589470ea147b382
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /BivvkqDW/index_files/config.js HTTP/1.1
Host: wpclick.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Fri, 03 May 2024 23:05:13 GMT
content-type: text/html
location: https://wpclick.cc/motwales/index_files/config.js
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hd0Fs9VC%2FgHUh1P1kOPtme9WV7YxM2iaa127CTrWJtVKtuzcrBaDLU0w%2B0MH6RLEOB66FQHVvOx2x7YZIQa8QSFII0bbm7oaxapOa6YH06sB9kgnxprgZxjv1V0c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e3e5012d80568d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| GET wpclick.cc/BivvkqDW/404.html | 104.21.54.148 | 404 Not Found | 4.7 kB |
URL User Request GET HTTP/3wpclick.cc/BivvkqDW/404.html IP 104.21.54.148:443
CertificateIssuerGoogle Trust Services LLC Subjectwpclick.cc FingerprintA2:F9:65:49:CA:A7:AC:23:83:67:99:AF:6A:5A:99:38:D3:B1:E1:8D ValidityWed, 03 Apr 2024 18:34:57 GMT - Tue, 02 Jul 2024 18:34:56 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /BivvkqDW/404.html HTTP/1.1
Host: wpclick.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Fri, 03 May 2024 23:05:13 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k6BiB%2F7b%2Ff1IFGdLf%2Bn1QGUYTzOhnlqlfLcYituBHplbKYpxdRk3m%2Bh2knCvkzjlUf1DFBPNJq5ShuckFpmz7su7wZK417g%2BBdTRmXDeJJgkL1sc54jc1j9CGoSr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e3e504bfda568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| GET wpclick.cc/favicon.ico | 104.21.54.148 | 404 Not Found | 146 B |
IP 104.21.54.148:443
Requested byhttps://wpclick.cc/BivvkqDW/404.html CertificateIssuerGoogle Trust Services LLC Subjectwpclick.cc FingerprintA2:F9:65:49:CA:A7:AC:23:83:67:99:AF:6A:5A:99:38:D3:B1:E1:8D ValidityWed, 03 Apr 2024 18:34:57 GMT - Tue, 02 Jul 2024 18:34:56 GMT
File typeHTML document, ASCII text, with no line terminators Hash40b3fc14254227ec5012d996bf90c4e1 b0dd06eb5a779151151101337889ff09953f8ac0 740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: wpclick.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wpclick.cc/BivvkqDW/404.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 03 May 2024 23:05:13 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dywKnl5BV9d1NYQ0rEEgijxb2fHI0cpY0w8dG3b77c74lYltca1LX2mKoMJmpkIH127Ibfgwt7LheSUWEZ73V1pbufUw9nbSj%2Fjp0EXqleowNkkKIVz14lbY71dh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e3e505b85e568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|