| www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack |  31.11.36.33 | 301 Moved Permanently | 168 B |
URL HTTP/1.1www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack IP31.11.36.33:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash82f04704c04c2706b1b96a73be2ff3a9 8cd210a378b7f54ce8945cdf1c7ce1f696171eee ede97dbf06b3e703cd950b3591a29351ce9b24eccab58b1a913b3c7e4571bf02
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: aruba-proxy
Date: Tue, 29 Nov 2022 06:55:54 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
Location: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack
X-ServerName: ipvsproxy254.ad.aruba.it
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha5daf4dc99951793ae2315d4795e8146 4427507ca4d3a5632cc8f598afbc85e2195d00bd 94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4055
Expires: Tue, 29 Nov 2022 08:03:29 GMT
Date: Tue, 29 Nov 2022 06:55:54 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash9408cc0694fcbea57966c3a3ba906092 fddcee1fdcf3209298e41a4b1b5560357fa165f0 6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4801
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 06:55:54 GMT
Last-Modified: Tue, 29 Nov 2022 05:35:53 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash6d9d34c96b9a826ae5676640c966469c 8052a16d41a637e420478b7de1ff5a2dc951fccd f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16763
Expires: Tue, 29 Nov 2022 11:35:17 GMT
Date: Tue, 29 Nov 2022 06:55:54 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 06:48:20 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 454
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: xxlgHIBy1PC/DgW5TyBFIXDmIxuF9Klb8NCd7zHYcM5nEWNum9fG9YEegW4HPVuVv6iQNO1h4VQ=
x-amz-request-id: NK2B1G59AYWKRSW4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 06:45:21 GMT
age: 633
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 06:55:54 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp06.actalis.it/VA/AUTHDV-G3 | 109.70.240.114 | 200 | 3.9 kB |
URL HTTP/1.1ocsp06.actalis.it/VA/AUTHDV-G3 IP109.70.240.114:0
Hashf3460b09330321a9a356983b9a59c107 f0bc3196bb607fe1897245deec7df04ae84c3ca6 c5f680d222d3903c53fd0dd190c8b9954a5fbc1b42f51f92145164a3d5414da6
POST /VA/AUTHDV-G3 HTTP/1.1
Host: ocsp06.actalis.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Tue, 29 Nov 2022 06:55:55 GMT
Content-Type: application/ocsp-response
Content-Length: 3926
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 02:19:55 GMT
Expires: Wed, 30 Nov 2022 02:19:54 GMT
ETag: "f0bc3196bb607fe1897245deec7df04ae84c3ca6"
|
|
| www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack | 31.11.36.33 | 301 Moved Permanently | 0 B |
URL HTTP/2www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack IP31.11.36.33:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
x-pingback: https://www.riobrasilword.com/xmlrpc.php
x-redirect-by: WordPress
x-servername: ipvsproxy254.ad.aruba.it
x-aruba-cache: HIT
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash07b8296613be09905e34b09dce4a203f c97c67e8c4b1247423d089c028c31e05734f124e c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 06:55:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash07b8296613be09905e34b09dce4a203f c97c67e8c4b1247423d089c028c31e05734f124e c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 06:55:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash07b8296613be09905e34b09dce4a203f c97c67e8c4b1247423d089c028c31e05734f124e c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 06:55:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.riobrasilword.com/wp-includes/css/classic-themes.min.css?ver=1 | 31.11.36.33 | 200 OK | 217 B |
URL HTTP/2www.riobrasilword.com/wp-includes/css/classic-themes.min.css?ver=1 IP31.11.36.33:0
Hash95e891f28e44a9b314c09545d86be2b7 f9b13a8bd47273b086a0a07df15f314e0af0bc3e 5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
content-length: 217
last-modified: Wed, 02 Nov 2022 09:00:58 GMT
accept-ranges: bytes
x-servername: ipvsproxy254.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 06:08:56 GMT
cache-control: public,max-age=3600
age: 2819
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/academicons.ttf?v=1.8.6 | 31.11.36.33 | 200 OK | 48 kB |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/academicons.ttf?v=1.8.6 IP31.11.36.33:0
File typeTrueType Font data, 11 tables, 1st "OS/2", 24 names, Macintosh, type 1 string, Academicons\012- data Hash1afcbd6a1c454e7b7f0bc58155558b9d 6946cb2f01c31c1e5dfdc6a7e4ad64dc2e4cdca8 107cca07d33ea31bbfe719513aa2b36e8cb8c8c8bcd521148746f652738c7101
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/academicons.ttf?v=1.8.6 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: font/ttf
content-length: 47500
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
accept-ranges: bytes
x-servername: ipvsproxy254.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/academicons.woff?v=1.8.6 | 31.11.36.33 | 200 OK | 48 kB |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/academicons.woff?v=1.8.6 IP31.11.36.33:0
File typeWeb Open Font Format, TrueType, length 47576, version 1.8\012- data Hash2552b354cabf01815628a244fde0636e 3c5e7d85d7e5030b8db8177daeb760abf97ed7dc bbf62cb77adfebbdcf36ef1cf8d2587f4cfa9bf56e23118613749778f94d8e14
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/academicons.woff?v=1.8.6 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: font/woff
content-length: 47576
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
accept-ranges: bytes
x-servername: ipvsproxy254.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.woff?v=4.7.0 | 31.11.36.33 | 200 OK | 98 kB |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.woff?v=4.7.0 IP31.11.36.33:0
File typeWeb Open Font Format, TrueType, length 98024, version 4.7\012- data Hashfee66e712a8a08eef5805a46892932ad 28b782240b3e76db824e12c02754a9731a167527 ba0c59deb5450f5cb41b3f93609ee2d0d995415877ddfa223e8a8a7533474f07
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.woff?v=4.7.0 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: font/woff
content-length: 98024
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
accept-ranges: bytes
x-servername: ipvsproxy254.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.ttf?v=4.7.0 | 31.11.36.33 | 200 OK | 166 kB |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.ttf?v=4.7.0 IP31.11.36.33:0
File typeTrueType Font data, 13 tables, 1st "FFTM", 24 names, Macintosh\012- data Size166 kB (165548 bytes) Hashb06871f281fee6b241d60582ae9369b9 13b1eab65a983c7a73bc7997c479d66943f7c6cb aa58f33f239a0fb02f5c7a6c45c043d7a9ac9a093335806694ecd6d4edc0d6a8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.ttf?v=4.7.0 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: font/ttf
content-length: 165548
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
accept-ranges: bytes
x-servername: ipvsproxy254.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/Genericons.woff | 31.11.36.33 | 200 OK | 14 kB |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/Genericons.woff IP31.11.36.33:0
File typeWeb Open Font Format, TrueType, length 13988, version 0.0\012- data Hashf3f73b280148eeed102d4a6874ac7886 973bfcd63513292f1bb220c241f6dde6509f1168 970a3fa15876d16dcc0fd70eb7c9ab44d733108b3ddca1a449edd0356c1b79a7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/Genericons.woff HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: font/woff
content-length: 13988
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
accept-ranges: bytes
x-servername: ipvsproxy254.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.woff2?v=4.7.0 | 31.11.36.33 | 200 OK | 77 kB |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.woff2?v=4.7.0 IP31.11.36.33:0
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: font/woff2
content-length: 77160
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
accept-ranges: bytes
x-servername: ipvsproxy254.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/Genericons.ttf | 31.11.36.33 | 200 OK | 22 kB |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/Genericons.ttf IP31.11.36.33:0
File typeTrueType Font data, 13 tables, 1st "FFTM", 14 names, Macintosh\012- data Hash008827208ffc4eeab99bf3cc14fe1e56 e024a5229566e3864856d72b7796a56ca7127252 7cd8dcb9820d7558bcb35bde35d9923a77c8eb9d2a274366261ad55948dfed31
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/Genericons.ttf HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: font/ttf
content-length: 22188
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
accept-ranges: bytes
x-servername: ipvsproxy254.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash7ab2ef968cb6a3078f4b9cb2dda813d4 e669116047ca058a2c1b2999ff0ea8682719162c 6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4889
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 06:55:55 GMT
Last-Modified: Tue, 29 Nov 2022 05:34:26 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/socicon.ttf?v=4.2.4 | 31.11.36.33 | 200 OK | 73 kB |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/socicon.ttf?v=4.2.4 IP31.11.36.33:0
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, socicon \012- data Hashd439c9e54f2e95a70fc541483b3c30b2 48c3d418b217ea38d9f4d1cc04301ed233b7f676 676ef1cd8eceb1e5a817ddd6c7803ebab7292e128a37419512143a1a8d94503d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/socicon.ttf?v=4.2.4 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: font/ttf
content-length: 72644
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
accept-ranges: bytes
x-servername: ipvsproxy254.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/socicon.woff?v=4.2.4 | 31.11.36.33 | 200 OK | 73 kB |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/socicon.woff?v=4.2.4 IP31.11.36.33:0
File typeWeb Open Font Format, TrueType, length 72720, version 1.0\012- data Hash3ef76f73793f8665aa4edfe41585c48b 6e4b731e6c57f623fc9c1b607822bf976cf54948 af546563f18c7d142f869e8cec7c2653a537fe5b2433a0fd5903c834a77404ac
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/socicon.woff?v=4.2.4 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: font/woff
content-length: 72720
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
accept-ranges: bytes
x-servername: ipvsproxy254.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash07b8296613be09905e34b09dce4a203f c97c67e8c4b1247423d089c028c31e05734f124e c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 06:55:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.riobrasilword.com/wp-content/plugins/wpzoom-portfolio/build/blocks/portfolio/script.js?ver=0c62b6ec4f9fb8f301820d9739fa4206 | 31.11.36.33 | 200 OK | 247 kB |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/wpzoom-portfolio/build/blocks/portfolio/script.js?ver=0c62b6ec4f9fb8f301820d9739fa4206 IP31.11.36.33:0
Size247 kB (246884 bytes) Hash3783873c953054293a30541e9d41625b f6594c3feadb8e485693b682bccbe4e2e0ce3028 9b34a4d24fcdde5cc0b726aa0f4cec01e5a5414efd6712edd9fcaec25cc430d6
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/wpzoom-portfolio/build/blocks/portfolio/script.js?ver=0c62b6ec4f9fb8f301820d9739fa4206 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 10:52:35 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/js/masonry.min.js?ver=4.2.2 | 31.11.36.33 | 200 OK | 21 kB |
URL HTTP/2www.riobrasilword.com/wp-includes/js/masonry.min.js?ver=4.2.2 IP31.11.36.33:0
Hash2400d63b8677daaf2096302842b64f99 c1cb649249089be6c5679a40f6a37880fc8c0260 d432fd92581652d4d074b9921d2a727551a2d9712cec7a275c82db3304db384a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 12 Mar 2022 04:46:50 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 | 31.11.36.33 | 200 OK | 5.6 kB |
URL HTTP/2www.riobrasilword.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 IP31.11.36.33:0
Hashdb3e5a65c3dfd64342885c6eb46878b5 07a3984e46beaa583bfa6818d1a604d5ac6bf10d 1dc11c86080a27cbfc8c725bbf13472c707ee964c207285bebb7a6bb74389426
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 24 May 2022 21:10:00 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash49eee25f3ccd585a29e34e80cf5bb160 73eca8be91deedd049304862759a3d8084c0b07e 531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 06:55:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.riobrasilword.com/wp-content/plugins/pagelayer/fonts/fa-brands-400.woff2 | 31.11.36.33 | 200 OK | 77 kB |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/pagelayer/fonts/fa-brands-400.woff2 IP31.11.36.33:0
File typeWeb Open Font Format (Version 2), TrueType, length 76736, version 331.-31196\012- data Hashed311c7a0ade9a75bb3ebf5a7670f31d 0613c7ebba55ee47ef302c0f7766324692f899a7 8ea8791754915a898a3100e63e32978a6d1763be6df8e73a39d3a90d691cdeef
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/pagelayer/fonts/fa-brands-400.woff2 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.riobrasilword.com/wp-content/plugins/pagelayer/css/combined.css?ver=1.7.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: font/woff2
content-length: 76736
last-modified: Tue, 22 Nov 2022 21:00:31 GMT
accept-ranges: bytes
x-servername: ipvsproxy254.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b | 31.11.36.33 | 200 OK | 1.2 kB |
URL HTTP/2www.riobrasilword.com/wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b IP31.11.36.33:0
Hash57ba24800b85e53940cbc54f552200d9 eece46fc5bfba00b1f6accdd0a6d41a3b01b4be3 4d3bb264f2c5ebd836b8d5ab735600821a5bafa43c1e0ade3f0e3521cfa81513
GET /wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 12 Mar 2022 04:46:50 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/themes/bravada/resources/fonts/iconmeta.ttf?9qd1ry | 31.11.36.33 | 200 OK | 52 kB |
URL HTTP/2www.riobrasilword.com/wp-content/themes/bravada/resources/fonts/iconmeta.ttf?9qd1ry IP31.11.36.33:0
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, iconmeta \012- data Hashcc0f8aecea3f8f8d7d446af8c7a8a5dc 33063a7c6d37b4defb3b32a72db8df4cf1f823a1 dce8c56589b57111eccf2c2a54cc6c3f54d4ef740ec8ec29c1591ca199bef23c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/bravada/resources/fonts/iconmeta.ttf?9qd1ry HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/wp-content/themes/bravada/resources/fonts/fontfaces.css?ver=1.0.6.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: font/ttf
content-length: 51956
last-modified: Sat, 09 Apr 2022 14:37:13 GMT
accept-ranges: bytes
x-servername: ipvsproxy254.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.riobrasilword.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 472907
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 31.11.36.33 | 200 OK | 7.6 kB |
URL HTTP/2www.riobrasilword.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP31.11.36.33:0
Hashb85b9dd548bf77a90d0d1968a1113a93 00c7e62ddefc78dcf85f9d9ca822f92302a79d6b 9abfae84d8ebeef85fdba2da3b044c64923ce49c9044e8af66bf319bcb69f67e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 02 Nov 2022 09:00:59 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/pagelayer/fonts/fa-solid-900.woff2 | 31.11.36.33 | 200 OK | 78 kB |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/pagelayer/fonts/fa-solid-900.woff2 IP31.11.36.33:0
File typeWeb Open Font Format (Version 2), TrueType, length 78268, version 331.-31196\012- data Hashd824df7eb2e268626a2dd9a6a741ac4e 0ccb2c814a7e4ca12c4778821633809cb0361eaa 9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/pagelayer/fonts/fa-solid-900.woff2 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.riobrasilword.com/wp-content/plugins/pagelayer/css/combined.css?ver=1.7.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: font/woff2
content-length: 78268
last-modified: Tue, 22 Nov 2022 21:00:31 GMT
accept-ranges: bytes
x-servername: ipvsproxy254.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash49eee25f3ccd585a29e34e80cf5bb160 73eca8be91deedd049304862759a3d8084c0b07e 531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 06:55:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.riobrasilword.com/wp-content/plugins/elementor/assets/js/lazyload.min.js?ver=3.10.0-dev1 | 31.11.36.33 | 200 OK | 32 kB |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/elementor/assets/js/lazyload.min.js?ver=3.10.0-dev1 IP31.11.36.33:0
Hashb44e07b9cc5fb6e26eeef1dee07713cd 7cc03c0caefe726780397b3bbaf017ad8afa63e1 1a3b5a74dfbb2ef4515f873fb87827a090b66fdbaf2cc141bd5554656a8ae95c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/js/lazyload.min.js?ver=3.10.0-dev1 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 08 Nov 2022 21:00:31 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/themes/bravada/resources/js/frontend.js?ver=1.0.6.1 | 31.11.36.33 | 200 OK | 34 kB |
URL HTTP/2www.riobrasilword.com/wp-content/themes/bravada/resources/js/frontend.js?ver=1.0.6.1 IP31.11.36.33:0
Hash16da12f9dba6cc102114d00a757f9948 2584dd706a75c020ca3ebc2e3883cf0630b3364d ded8b42a2c293315ee6f39272977041d3ff0256ddcf3b384dd984beca794debc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/bravada/resources/js/frontend.js?ver=1.0.6.1 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 14:37:13 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data Hash3a44e06eb954b96aa043227f3534189d 23cef6993ddb2b2979e8e7647fc3763694e2ba7d b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.riobrasilword.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 14:07:32 GMT
expires: Thu, 23 Nov 2023 14:07:32 GMT
cache-control: public, max-age=31536000
age: 492503
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data Hashb9c29351c46f3e8c8631c4002457f48a e57e59c5780995ff2937ab2b511a769212974a87 f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.riobrasilword.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:21 GMT
expires: Thu, 23 Nov 2023 19:34:21 GMT
cache-control: public, max-age=31536000
age: 472894
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.10.0-dev1 | 31.11.36.33 | 200 OK | 28 kB |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.10.0-dev1 IP31.11.36.33:0
Hasha5b83007172ebf9ea9db4bc899411e65 aee7c0f1652a57b8e4f7d570ba689841e923d4db 3cd21eea7325f1a2e01577ca1262178082efd9d50a8db7fc99674f1640311daf
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.10.0-dev1 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 08 Nov 2022 21:00:31 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 | 216.58.207.195 | 200 OK | 36 kB |
URL HTTP/2fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 35764, version 1.0\012- data Hash60f23230f1a8d5c3b7d25b73f5b5ce23 ed08ada85d017893b9bcb8224e99154c6708f5d2 22b6cdc450204c1cb32b31e679d812fea1c17ac506a7b78daeb12bd0ab25fde8
GET /s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.riobrasilword.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 15:03:06 GMT
expires: Wed, 22 Nov 2023 15:03:06 GMT
cache-control: public, max-age=31536000
age: 575569
last-modified: Mon, 18 Jul 2022 19:06:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash49eee25f3ccd585a29e34e80cf5bb160 73eca8be91deedd049304862759a3d8084c0b07e 531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 06:55:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| push.services.mozilla.com/ | 54.148.77.40 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.148.77.40:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4S3rX0r3C4PdDRbftR7uvQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: A3OXztMBdnkX0L3Ox1TPWe3dg/w=
|
|
| s.w.org/images/core/emoji/14.0.0/svg/1f516.svg | 192.0.77.48 | 200 OK | 1.3 kB |
URL HTTP/2s.w.org/images/core/emoji/14.0.0/svg/1f516.svg IP192.0.77.48:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1269), with no line terminators Hash2424297076c0d1c8499820fc4f9d9f57 5722afe6b6bba7807dfba343505678187027b6b5 be8243f00b027aa5ef43f553467a45bcc6cb3f1a0a14723881eacdcaef1aebb9
GET /images/core/emoji/14.0.0/svg/1f516.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: image/svg+xml
content-length: 1269
last-modified: Tue, 12 Apr 2022 03:47:26 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/14.0.0/svg/1f44a.svg | 192.0.77.48 | 200 OK | 1.3 kB |
URL HTTP/2s.w.org/images/core/emoji/14.0.0/svg/1f44a.svg IP192.0.77.48:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1325), with no line terminators Hash4601b0cf78b83ff531ea80756d6cc9c2 93d9d165766bcb2d33062b6b172ae556a4c936c2 8eb1aee1a6bdd89e42447bd3f190d4e9dbd768dc0981bd8ec21539375af59575
GET /images/core/emoji/14.0.0/svg/1f44a.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: image/svg+xml
content-length: 1325
last-modified: Tue, 12 Apr 2022 03:47:50 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/14.0.0/svg/1f4e4.svg | 192.0.77.48 | 200 OK | 539 B |
URL HTTP/2s.w.org/images/core/emoji/14.0.0/svg/1f4e4.svg IP192.0.77.48:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (539), with no line terminators Hash13a4210298dfc7e57883c733259bda0a 34d71ce994f08cd58cfcf596e215272fdd690638 7d928d0a661f39bd4e200c34c45a6bbeaa069828788a1730338ae5499a710187
GET /images/core/emoji/14.0.0/svg/1f4e4.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: image/svg+xml
content-length: 539
last-modified: Tue, 12 Apr 2022 03:47:26 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/uploads/2022/04/cropped-R-1.png | 31.11.36.33 | 200 OK | 27 kB |
URL HTTP/2www.riobrasilword.com/wp-content/uploads/2022/04/cropped-R-1.png IP31.11.36.33:0
File typePNG image data, 425 x 470, 8-bit/color RGBA, non-interlaced\012- data Hash600477422b071ded766d6b76b64b35cc 1bbdc9ae0a6e5887b5e479ef35df01dcb946857d a757e2bd58098c2a37b1e1ebf5d6399e13e3375ee021bd34cee63407d09b3afa
GET /wp-content/uploads/2022/04/cropped-R-1.png HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: image/png
content-length: 27151
last-modified: Sat, 09 Apr 2022 09:54:12 GMT
accept-ranges: bytes
x-servername: ipvsproxy254.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/uploads/2022/04/cropped-R-1-150x150.png | 31.11.36.33 | 200 OK | 11 kB |
URL HTTP/2www.riobrasilword.com/wp-content/uploads/2022/04/cropped-R-1-150x150.png IP31.11.36.33:0
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data Hash4e0bae77be02d92976db711dd260eefa 65f01d57a8b7931dd232946e8ef2b4e35a70d22a c60c6bbe13c7fe2f36519920965c85e8e832263100d94befd20f6646584d01de
GET /wp-content/uploads/2022/04/cropped-R-1-150x150.png HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: image/png
content-length: 10565
last-modified: Sat, 09 Apr 2022 09:54:12 GMT
accept-ranges: bytes
x-servername: ipvsproxy254.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| secure.gravatar.com/avatar/e2a8940867de46b7c1054135323c6c2c?s=96&d=mm&r=g | 192.0.73.2 | 200 OK | 1.5 kB |
URL HTTP/2secure.gravatar.com/avatar/e2a8940867de46b7c1054135323c6c2c?s=96&d=mm&r=g IP192.0.73.2:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 96x96, components 3\012- data Hashc7d444a35d350f37cf996778686f9fce 41d80eb83a0e887107ab47d84002a24aef786447 67f565f25c1bb8ae629cfca60c71766232073a0c905e0387e45895657b4ae3e7
GET /avatar/e2a8940867de46b7c1054135323c6c2c?s=96&d=mm&r=g HTTP/1.1
Host: secure.gravatar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 06:55:56 GMT
content-type: image/jpeg
content-length: 1528
last-modified: Wed, 11 Jan 1984 08:00:00 GMT
link: <https://www.gravatar.com/avatar/e2a8940867de46b7c1054135323c6c2c?s=96&d=mm&r=g>; rel="canonical"
access-control-allow-origin: *
content-disposition: inline; filename="e2a8940867de46b7c1054135323c6c2c.png"
expires: Tue, 29 Nov 2022 07:00:56 GMT
cache-control: max-age=300
x-nc: MISS arn 4
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashac3edd07bb0a4ebdaae6ec26e91d2079 b6efe3811dfa37cdcde1e9d411c171732ac7e12a c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8242
Expires: Tue, 29 Nov 2022 09:13:19 GMT
Date: Tue, 29 Nov 2022 06:55:57 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashac3edd07bb0a4ebdaae6ec26e91d2079 b6efe3811dfa37cdcde1e9d411c171732ac7e12a c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8242
Expires: Tue, 29 Nov 2022 09:13:19 GMT
Date: Tue, 29 Nov 2022 06:55:57 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashac3edd07bb0a4ebdaae6ec26e91d2079 b6efe3811dfa37cdcde1e9d411c171732ac7e12a c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8242
Expires: Tue, 29 Nov 2022 09:13:19 GMT
Date: Tue, 29 Nov 2022 06:55:57 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg | 34.120.237.76 | 200 OK | 4.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashcc0a257323f882caff067adb86d906e4 cedf2f21be7cd366bd46055b62b5513db3011dfc c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 22:43:20 GMT
age: 29557
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3527eb28-888e-447d-90fd-1226d5b94433.jpeg | 34.120.237.76 | 200 OK | 8.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3527eb28-888e-447d-90fd-1226d5b94433.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash823e92f62ff7b3c2093828817d7f2866 c501de9eaa581a10b0b5fce40b54bb10f57f7c29 7d89669e23682f167b2fe1eff9edc5939112ec66b6b4e6389ef8aec78ccbdfe5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3527eb28-888e-447d-90fd-1226d5b94433.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8921
x-amzn-requestid: 98baf100-c007-4c44-89aa-b9cf55fa3f94
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnwFYToAMFoWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852964-1227b5a9100c206e0c64f4b2;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: awi49MMMlK51wHPbyBrBkL4N4g9lX3ea40LxyrYbYxe_FsfqelTcTQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:57:05 GMT
etag: "c501de9eaa581a10b0b5fce40b54bb10f57f7c29"
content-type: image/jpeg
age: 32332
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9868f6d6-e29b-42b5-89c4-eec4771663b2.jpeg | 34.120.237.76 | 200 OK | 8.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9868f6d6-e29b-42b5-89c4-eec4771663b2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashfaf3524970b0c3256eb5708f4ccf11ce 47295f2cf1b039c4b85cbe463d7893671a563989 ba0c2ce23eae865936caa7fb47dd1ef6346b8a7bc8340db700df6e2f5e27ec27
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9868f6d6-e29b-42b5-89c4-eec4771663b2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8402
x-amzn-requestid: d2d62f85-b6be-4394-9668-1d913e4120d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYeaGbgoAMFdCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d45c-2b6bfdcc72011cf01ddbd66b;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:07:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1il1ILDPBUseZWYjae_R0BQhpdyPTqqI0GycCljovgxjqhYezCwxCA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 04:18:26 GMT
age: 9451
etag: "47295f2cf1b039c4b85cbe463d7893671a563989"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51b530e0-9ee5-45ee-95e9-a687ac33f22c.jpeg | 34.120.237.76 | 200 OK | 3.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51b530e0-9ee5-45ee-95e9-a687ac33f22c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash22e7d3e11e78242383e452adb9299016 035a1b4a2a7889787532ec2637d5c21e06daf672 990f18423bafc9cc3daaa1bd1290313b6cb3d3a391f642d01fd6797ad4fc9ca8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51b530e0-9ee5-45ee-95e9-a687ac33f22c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3004
x-amzn-requestid: 1e6e228a-fb73-4ed3-881b-6b0e5c8297c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrFRXoAMFUJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-45059338501b45d943d7e08c;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rb-NFzuOBQEOMHfs7L68ZBeBH_JMqKYfJhxWs4eNYq35L8duYylQdg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 02:07:34 GMT
age: 17303
etag: "035a1b4a2a7889787532ec2637d5c21e06daf672"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b0dcfcd-38d5-4614-ad4e-405d8ad4ee91.jpeg | 34.120.237.76 | 200 OK | 6.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b0dcfcd-38d5-4614-ad4e-405d8ad4ee91.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb5e2bc1651b37b8e0467c2a6cb860fb3 3348f081a3357490a704592d105d02e81886df89 751c601e075c9338335c05b0f430ba8065b4e97440e6630993afd943f302b253
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b0dcfcd-38d5-4614-ad4e-405d8ad4ee91.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6037
x-amzn-requestid: eb17903e-1fd3-4a41-a6d1-8b671d890400
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPAJjFa3oAMFcLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382ad70-3db95fcd1aeb9c411c55d173;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 00:21:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mFiEmh1axlMNuIBb1YSzcciCdHzHGG7q0f3lQOuHJmjugWgdZKKiSg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 11:27:11 GMT
age: 70126
etag: "3348f081a3357490a704592d105d02e81886df89"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash03014221d7f49b50ffc2d1b0a0e75457 772d86ad983042a728ee3490630a9cf1134ad0dd 81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10176
x-amzn-requestid: 768fc69c-e91b-4dd9-8add-63634762b2d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpbgEFOIAMF71A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bc49-21756db31c4714af0553f21b;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:12:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jS-AS3x8V3XacXRNkU63UJjBxA6unvBer5WcxUYseR5p4eZPK64o2g==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 07:40:08 GMT
age: 83749
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg | 34.120.237.76 | 200 OK | 4.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha2a5c8d4113d282600462749315f2c4f e2b4d2e15bb7c086333c0da438873e4c139ba931 9b5d0e5dd11d4cbf1c78a71730cd63544170c91ab635bf3cf917827ac84874e6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 4417
x-amzn-requestid: 01de83c2-51d2-4329-98f6-09a0edf46942
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnGEcRIAMFaXA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852960-34583b6c588a0e937fcfaa46;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Jb1eLyzn88lV_UTId-Fl3OnftDn8c7o5j8d16_nzHCNST_68MZ1pvA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:50:08 GMT
age: 32756
etag: "e2b4d2e15bb7c086333c0da438873e4c139ba931"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/instagram-widget-by-wpzoom/assets/frontend/swiper/swiper.css?ver=1.9.5 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/instagram-widget-by-wpzoom/assets/frontend/swiper/swiper.css?ver=1.9.5 IP31.11.36.33:0
GET /wp-content/plugins/instagram-widget-by-wpzoom/assets/frontend/swiper/swiper.css?ver=1.9.5 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 10:53:43 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/cryout-serious-slider/resources/jquery.mobile.custom.min.js?ver=1.2.3 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/cryout-serious-slider/resources/jquery.mobile.custom.min.js?ver=1.2.3 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/cryout-serious-slider/resources/jquery.mobile.custom.min.js?ver=1.2.3 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 14:37:59 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 24 May 2022 21:09:59 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-socicon.css?ver=1649501642 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-socicon.css?ver=1649501642 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-socicon.css?ver=1649501642 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 02 Nov 2022 09:00:59 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 24 May 2022 21:09:59 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/js/comment-reply.min.js?ver=6.1.1 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-includes/js/comment-reply.min.js?ver=6.1.1 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/comment-reply.min.js?ver=6.1.1 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 24 May 2022 21:09:59 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Muli%3A%7CPlayfair+Display%3A%7CMuli%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%7CPlayfair+Display%3A700&ver=1.0.6.1 | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Muli%3A%7CPlayfair+Display%3A%7CMuli%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%7CPlayfair+Display%3A700&ver=1.0.6.1 IP142.250.74.10:0
GET /css?family=Muli%3A%7CPlayfair+Display%3A%7CMuli%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%7CPlayfair+Display%3A700&ver=1.0.6.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 29 Nov 2022 06:55:55 GMT
date: Tue, 29 Nov 2022 06:55:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/css/dashicons.min.css?ver=6.1.1 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-includes/css/dashicons.min.css?ver=6.1.1 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/css/dashicons.min.css?ver=6.1.1 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 12 Mar 2022 04:46:50 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/cryout-serious-slider/resources/style.css?ver=1.2.3 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/cryout-serious-slider/resources/style.css?ver=1.2.3 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/cryout-serious-slider/resources/style.css?ver=1.2.3 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 14:37:59 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 02 Nov 2022 09:01:00 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/wpzoom-portfolio/build/script.js?ver=f0806654071d159197fcf61cedea88b5 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/wpzoom-portfolio/build/script.js?ver=f0806654071d159197fcf61cedea88b5 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/wpzoom-portfolio/build/script.js?ver=f0806654071d159197fcf61cedea88b5 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 10:52:35 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/cryout-serious-slider/resources/slider.js?ver=1.2.3 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/cryout-serious-slider/resources/slider.js?ver=1.2.3 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/cryout-serious-slider/resources/slider.js?ver=1.2.3 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 14:37:59 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.10.0-dev1 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.10.0-dev1 IP31.11.36.33:0
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.10.0-dev1 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 08 Nov 2022 21:00:31 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/block/dist/style-wpzoom-social-icons.css?ver=4.2.4 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/block/dist/style-wpzoom-social-icons.css?ver=4.2.4 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/social-icons-widget-by-wpzoom/block/dist/style-wpzoom-social-icons.css?ver=4.2.4 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/wpzoom-portfolio/build/blocks/portfolio/style.css?ver=e01684e96c736f225b9510141c059823 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/wpzoom-portfolio/build/blocks/portfolio/style.css?ver=e01684e96c736f225b9510141c059823 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/wpzoom-portfolio/build/blocks/portfolio/style.css?ver=e01684e96c736f225b9510141c059823 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 10:52:35 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 24 May 2022 21:09:58 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 08 Nov 2022 21:00:31 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-social-icons-styles.css?ver=1649501642 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-social-icons-styles.css?ver=1649501642 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-social-icons-styles.css?ver=1649501642 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/js/dist/url.min.js?ver=bb0ef862199bcae73aa7 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-includes/js/dist/url.min.js?ver=bb0ef862199bcae73aa7 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/dist/url.min.js?ver=bb0ef862199bcae73aa7 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 02 Nov 2022 09:00:59 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/pagelayer/css/combined.css?ver=1.7.2 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/pagelayer/css/combined.css?ver=1.7.2 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/pagelayer/css/combined.css?ver=1.7.2 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 22 Nov 2022 21:00:31 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/themes/bravada/style.css?ver=1.0.6.1 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/themes/bravada/style.css?ver=1.0.6.1 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/bravada/style.css?ver=1.0.6.1 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 14:37:13 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/academicons.min.css?ver=1649501642 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/academicons.min.css?ver=1649501642 IP31.11.36.33:0
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/academicons.min.css?ver=1649501642 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/font-awesome-3.min.css?ver=1649501642 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/font-awesome-3.min.css?ver=1649501642 IP31.11.36.33:0
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/font-awesome-3.min.css?ver=1649501642 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/pagelayer/js/combined.js?ver=1.7.2 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/pagelayer/js/combined.js?ver=1.7.2 IP31.11.36.33:0
GET /wp-content/plugins/pagelayer/js/combined.js?ver=1.7.2 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 22 Nov 2022 21:00:31 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/js/dist/api-fetch.min.js?ver=bc0029ca2c943aec5311 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-includes/js/dist/api-fetch.min.js?ver=bc0029ca2c943aec5311 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/dist/api-fetch.min.js?ver=bc0029ca2c943aec5311 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 24 May 2022 21:09:59 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/ | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/ IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/ HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-pingback: https://www.riobrasilword.com/xmlrpc.php
link: <https://www.riobrasilword.com/wp-json/>; rel="https://api.w.org/", <https://www.riobrasilword.com/wp-json/wp/v2/posts/72243>; rel="alternate"; type="application/json", <https://www.riobrasilword.com/?p=72243>; rel=shortlink
x-servername: ipvsproxy254.ad.aruba.it
x-aruba-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/elementor/assets/css/modules/lazyload/frontend.min.css?ver=3.10.0-dev1 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/elementor/assets/css/modules/lazyload/frontend.min.css?ver=3.10.0-dev1 IP31.11.36.33:0
GET /wp-content/plugins/elementor/assets/css/modules/lazyload/frontend.min.css?ver=3.10.0-dev1 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 08 Nov 2022 21:00:30 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/instagram-widget-by-wpzoom/assets/frontend/magnific-popup/magnific-popup.css?ver=1.9.5 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/instagram-widget-by-wpzoom/assets/frontend/magnific-popup/magnific-popup.css?ver=1.9.5 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/instagram-widget-by-wpzoom/assets/frontend/magnific-popup/magnific-popup.css?ver=1.9.5 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 10:53:43 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/js/social-icons-widget-frontend.js?ver=1649501642 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/js/social-icons-widget-frontend.js?ver=1649501642 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/js/social-icons-widget-frontend.js?ver=1649501642 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae IP31.11.36.33:0
GET /wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 02 Nov 2022 09:00:59 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4 IP31.11.36.33:0
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 12 Mar 2022 04:46:50 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.10.0-dev1 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.10.0-dev1 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.10.0-dev1 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 08 Nov 2022 21:00:31 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto%3A400%2C500%7CCabin%3A400%2C700&ver=1.7.2 | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Roboto%3A400%2C500%7CCabin%3A400%2C700&ver=1.7.2 IP142.250.74.10:0
GET /css?family=Roboto%3A400%2C500%7CCabin%3A400%2C700&ver=1.7.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 29 Nov 2022 06:55:55 GMT
date: Tue, 29 Nov 2022 06:55:55 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto%3A400%2C500%2Cbold%2C300%7CCabin%3A400%2C700%2C600%7Croboto%3A100%2C100i%2C200%2C200i%2C300%2C300i%2C400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%2C800%2C800i%2C900%2C900i | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Roboto%3A400%2C500%2Cbold%2C300%7CCabin%3A400%2C700%2C600%7Croboto%3A100%2C100i%2C200%2C200i%2C300%2C300i%2C400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%2C800%2C800i%2C900%2C900i IP142.250.74.10:0
GET /css?family=Roboto%3A400%2C500%2Cbold%2C300%7CCabin%3A400%2C700%2C600%7Croboto%3A100%2C100i%2C200%2C200i%2C300%2C300i%2C400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%2C800%2C800i%2C900%2C900i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.riobrasilword.com
Connection: keep-alive
Referer: https://www.riobrasilword.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 29 Nov 2022 06:55:55 GMT
date: Tue, 29 Nov 2022 06:55:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto%3A400%2C500%7CCabin%3A400%2C700 | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Roboto%3A400%2C500%7CCabin%3A400%2C700 IP142.250.74.10:0
GET /css?family=Roboto%3A400%2C500%7CCabin%3A400%2C700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.riobrasilword.com
Connection: keep-alive
Referer: https://www.riobrasilword.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 29 Nov 2022 06:55:55 GMT
date: Tue, 29 Nov 2022 06:55:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/instagram-widget-by-wpzoom/css/instagram-widget.css?ver=1.9.5 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/instagram-widget-by-wpzoom/css/instagram-widget.css?ver=1.9.5 IP31.11.36.33:0
GET /wp-content/plugins/instagram-widget-by-wpzoom/css/instagram-widget.css?ver=1.9.5 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 10:53:43 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP31.11.36.33:0
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 12 Mar 2022 04:46:50 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto%3A400%2C500%2Cbold%2C300%7CCabin%3A400%2C700%2C600%7Croboto%3A100%2C100i%2C200%2C200i%2C300%2C300i%2C400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%2C800%2C800i%2C900%2C900i&ver=1.7.2 | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Roboto%3A400%2C500%2Cbold%2C300%7CCabin%3A400%2C700%2C600%7Croboto%3A100%2C100i%2C200%2C200i%2C300%2C300i%2C400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%2C800%2C800i%2C900%2C900i&ver=1.7.2 IP142.250.74.10:0
GET /css?family=Roboto%3A400%2C500%2Cbold%2C300%7CCabin%3A400%2C700%2C600%7Croboto%3A100%2C100i%2C200%2C200i%2C300%2C300i%2C400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%2C800%2C800i%2C900%2C900i&ver=1.7.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 29 Nov 2022 06:55:55 GMT
date: Tue, 29 Nov 2022 06:55:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/themes/bravada/resources/fonts/fontfaces.css?ver=1.0.6.1 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/themes/bravada/resources/fonts/fontfaces.css?ver=1.0.6.1 IP31.11.36.33:0
GET /wp-content/themes/bravada/resources/fonts/fontfaces.css?ver=1.0.6.1 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 14:37:13 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/genericons.css?ver=1649501642 | 31.11.36.33 | 200 OK | 0 B |
URL HTTP/2www.riobrasilword.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/genericons.css?ver=1649501642 IP31.11.36.33:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/genericons.css?ver=1649501642 HTTP/1.1
Host: www.riobrasilword.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.riobrasilword.com/2022/11/20/mcgraw-hill-connect-anatomy-and-physiology-answer-key-rar-repack/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Tue, 29 Nov 2022 06:55:55 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 09 Apr 2022 10:54:02 GMT
x-servername: ipvsproxy254.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|