| www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php |  54.230.111.19 | 301 Moved Permanently | 167 B |
URL HTTP/1.1www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php IP54.230.111.19:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hashf5d40b7259645010f9a248858ad14178 b3051d17a6ec8c9e166bf09a62b48261ab86957b 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 18 Nov 2022 16:42:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
X-Cache: Redirect from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hdH8SPafpMqc4mLbbLgv5vcQnrLbEYoGrQYEUHMluTcnCQ5GOgbYtA==
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd27590a1d3cbe1e9632b8ae92aaae3f4 202b34e8a0c3b88c8826fd56c6227b34f2cd6f46 6bcfa518476658128c1fb4ea2435c4e58531454cf97138dce7ece9def589aead
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6BCFA518476658128C1FB4EA2435C4E58531454CF97138DCE7ECE9DEF589AEAD"
Last-Modified: Wed, 16 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11584
Expires: Fri, 18 Nov 2022 19:55:42 GMT
Date: Fri, 18 Nov 2022 16:42:38 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash67f53a639d57dd6237b5be86fe4f6c1b 287f09532dc331228d09c20b75f4160e91e9800a 41913a8af366685c42af59e9d8e02fccedbe68a3313d2d9fe353deb0c1019075
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3461
Cache-Control: max-age=153970
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 16:42:38 GMT
Etag: "63775eeb-1d7"
Expires: Sun, 20 Nov 2022 11:28:48 GMT
Last-Modified: Fri, 18 Nov 2022 10:31:07 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
|
|
| firefox.settings.services.mozilla.com/v1/ | 34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash4d7e4eed097b9c4e5d509419f1cfc85a 290bb3d428a7c6330e2e3d73a952b16f820896c8 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 18 Nov 2022 15:45:03 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3455
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash3a38b6dd8a4cc335c026aebf2ed348b6 8a386e0ccb0ca4dc502746c45b2ebc3aa3f83cf8 8b4040a645cec1841a00a22765eb3a74978559daf15c54bd4b41b6b48aab7f95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B4040A645CEC1841A00A22765EB3A74978559DAF15C54BD4B41B6B48AAB7F95"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4734
Expires: Fri, 18 Nov 2022 18:01:32 GMT
Date: Fri, 18 Nov 2022 16:42:38 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: h88Lbyi6JRVs6Dd635nHY6rQjwPWBHC9qkSG0UVJZ7U28hIFI0eIyxkAulfDs9D91MIe5RL8kX0=
x-amz-request-id: ZBHQZ14GM864RZG8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 18 Nov 2022 16:15:40 GMT
age: 1618
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 16:42:38 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.100 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.100:0
Hashab1da9b4498fff1711110a5ea072c272 79966d63e1d6b810b4510658def768304e05676d bb355f34e1b4453db0df3ca26e4a01458dfa2b5c3c48c4121af744fa1fe27805
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=166349
Date: Fri, 18 Nov 2022 16:42:39 GMT
Etag: "63779ccc-1d7"
Expires: Sun, 20 Nov 2022 14:55:08 GMT
Last-Modified: Fri, 18 Nov 2022 14:55:08 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5AgJUPW0Z4u_Dk5CdYlqnh-q1jATU27u0ZW5iH3cRqYE-hxS1u_FLg==
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 18 Nov 2022 16:25:01 GMT
cache-control: public,max-age=3600
age: 1058
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfe40cc6ea871d80382b6082111393fbe 281f75d0a35dc8ef908bb0500e57abd86bd5388e 6d15422cdf7a6d72d06497188f27af893682314e82ac8a189a0ee2d798cb62d7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4565
Cache-Control: max-age=150022
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 16:42:39 GMT
Etag: "63774b30-1d7"
Expires: Sun, 20 Nov 2022 10:23:01 GMT
Last-Modified: Fri, 18 Nov 2022 09:06:56 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 54.69.181.45 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.69.181.45:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: FtrtLxmg3Fuja2hncz4Mjg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YdZbY5SyQigEChkmPvugGD6M1OU=
|
|
| www.gaynorkennedycup.ie/wp-includes/css/classic-themes.min.css?ver=1 | 54.230.111.19 | 200 OK | 189 B |
URL HTTP/2www.gaynorkennedycup.ie/wp-includes/css/classic-themes.min.css?ver=1 IP54.230.111.19:0
Hash5a18e16eb01cbaa862eb32e6b77bedb2 3abf9b913cc9f558f02cba7c9b822f8d1812cb96 d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 189
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:39 GMT
etag: "d9-5edbc4cab9690-gzip"
last-modified: Fri, 18 Nov 2022 10:37:59 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: G4znccby52P4XSerCg9YSbY2d_UE55CLDR6S69h3nu0YXjyMO2oiDQ==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 | 54.230.111.19 | 200 OK | 12 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 IP54.230.111.19:0
File typeASCII text, with very long lines (47826) Hash8fa87dd23394a22621248ec378d2af59 9305bc637a89b1700d7f56a19a80bd32b0feb2f7 c162f7de24fa2d4e93e0da254ef287ff72f4a3e03f42443265097968351388dc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 12518
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:39 GMT
etag: "172a9-5edbc4cabd511-gzip"
last-modified: Fri, 18 Nov 2022 10:37:59 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IHK5ytnzyjzebEX2sd-OkUlgxmHB1OP9bdBatuJZBs0Ec-M0B7Nb4g==
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashfeaeba711c7421b074e726f89ff34e0b c590c0b76a7a78ab51a4dabcd8f20a1b172b02fb ebe6e312ea7116713547fbd756805843b1c242ad22269158a79305f1819fa990
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 16:42:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold/css/grid.css?ver=2 | 54.230.111.19 | 200 OK | 2.1 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold/css/grid.css?ver=2 IP54.230.111.19:0
Hashf124d626afabfa763ff3478f8caece26 54fc7549dfe9c819c805385ac0c7f5589349aee3 6cd52e64b1733868f54b7f792e7f16dbbce311c8182f2b7c199c53a31d9b2186
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/enfold/css/grid.css?ver=2 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 2054
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "2368-53b37c4e2ef00-gzip"
last-modified: Mon, 29 Aug 2016 15:46:36 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nXy9wiKqY_ScXPcc6NMaMdM7avIlWanTRYFBgNN4pZQW0C2sdZu8qw==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold/css/base.css?ver=2 | 54.230.111.19 | 200 OK | 4.0 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold/css/base.css?ver=2 IP54.230.111.19:0
File typeASCII text, with very long lines (492) Hasha124ff9bfea9fde469e699f4b47ecfd5 17e96f23da86f1d5ef540390a6f140501ccb22a1 709073d739d0cf9426850cf0242755bcbb4232ed1ec719020e4ad451a9991774
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/enfold/css/base.css?ver=2 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 3996
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "34e5-5333b0820af00-gzip"
last-modified: Fri, 20 May 2016 00:18:36 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7BGoWn-V00qP5N-eICV50C-sMIu1yC6etsUs3vUYjpnijGmsRgVhiQ==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold/js/aviapopup/magnific-popup.css?ver=1 | 54.230.111.19 | 200 OK | 1.9 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold/js/aviapopup/magnific-popup.css?ver=1 IP54.230.111.19:0
Hash37c056e7821acadf244ad73d5914b668 5b84220f1a5be67edd48d8763990dd24c95c137b 50ff14af2c522d18515c57ebb086ab4643c22f4153eec4665ae7103a889393fa
GET /wp-content/themes/enfold/js/aviapopup/magnific-popup.css?ver=1 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 1914
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "1dd8-5265225a07600-gzip"
last-modified: Mon, 07 Dec 2015 17:25:44 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Z0N5PFz8UKZLxxgBfP9q2S6WYCYXCGn-eCNb-iO9wIxmQjUOjYy5ag==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold/js/mediaelement/skin-1/mediaelementplayer.css?ver=1 | 54.230.111.19 | 200 OK | 3.3 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold/js/mediaelement/skin-1/mediaelementplayer.css?ver=1 IP54.230.111.19:0
Hash822aefa6cfe90cdf065941e38d544b68 2228467d6d23fecf57de54a20dbf0a6ae30caff2 46f87ef55bc1de98c67d3151994da1dd9905b90978c57728f4719ce0343a7614
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/enfold/js/mediaelement/skin-1/mediaelementplayer.css?ver=1 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 3274
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "4747-5265225a07600-gzip"
last-modified: Mon, 07 Dec 2015 17:25:44 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3-afnqXhcytJ7DsWR_r8w59KrZ-xwLNeu9LjIxm0ejuXJ5cAy7kG_Q==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold/css/custom.css?ver=2 | 54.230.111.19 | 200 OK | 325 B |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold/css/custom.css?ver=2 IP54.230.111.19:0
Hash712b456a13d44b811d2d1717a9f5612a 7c1756c1ac2cde779cffbea1402e4c7a28bbaaaf 4d123778016ce146032d877b9e58d279b9afc18ded2106f49d6cff8d218084b3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/enfold/css/custom.css?ver=2 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 325
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "2c3-526522581f180-gzip"
last-modified: Mon, 07 Dec 2015 17:25:42 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Q5vKa7DVNkexRuMXPqkb73uBQ-Ay04tRWoXNvN5gVOuyvSHoz-a_wA==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php | 54.230.111.19 | 404 Not Found | 42 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php IP54.230.111.19:0
Hashbd341528e1fe500f796d80f1dfadca65 36e2ce79c5eb4fa755c053a4509343074834e257 76d501e6b3e5d1b863551e5f85cc6b72b6a67164979006c78c2bfcc07b0957fb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-cache, must-revalidate, max-age=0
date: Fri, 18 Nov 2022 16:42:39 GMT
expires: Wed, 11 Jan 1984 05:00:00 GMT
link: <https://www.gaynorkennedycup.ie/wp-json/>; rel="https://api.w.org/"
pragma: no-cache
server: Apache/2.4.18 (Ubuntu)
set-cookie: PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3; path=/
x-cache: Error from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TNfUtFxojR-mXyOl73AUGchyIJfxyhl36lvKWa2nKQh9dtPOer7qDg==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold-child/style.css?ver=2 | 54.230.111.19 | 200 OK | 3.5 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold-child/style.css?ver=2 IP54.230.111.19:0
File typeHTML document, ASCII text, with CRLF line terminators Hash7052b7fd2a6a9129de3d61c4bdb9ef3d f21a8982f841ca2526b9615d627d43766e61e977 33de1465032280c467fc36180380ad59b5b2f5ea24dec82ecceecce7b0129847
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/enfold-child/style.css?ver=2 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 3513
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "4a69-5dfff09f10c00-gzip"
last-modified: Fri, 27 May 2022 14:22:40 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oKJHfQ0WAlUVQSn40DhBasqIaNK8lH9LBmdVZtehXP9ZChP82XIzRA==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold/js/avia-compat.js?ver=2 | 54.230.111.19 | 200 OK | 960 B |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold/js/avia-compat.js?ver=2 IP54.230.111.19:0
Hashf59eeb04b3cd2bf88ee786f3fc71d898 91949443dbba290fcf0a3be1d0c61568eeba26ef 707e3683b99142a7c983a45509938ba7bfe79d454549c73f7564a1ae9caf182a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/enfold/js/avia-compat.js?ver=2 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 960
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "83a-5265225a07600-gzip"
last-modified: Mon, 07 Dec 2015 17:25:44 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tRxNkwNCJHRfG9x0nrege6VoI2NQiIowCyIvoHDXdUPy8Q5UVO0tQA==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold/css/layout.css?ver=2 | 54.230.111.19 | 200 OK | 22 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold/css/layout.css?ver=2 IP54.230.111.19:0
File typeASCII text, with very long lines (320) Hashadc889fac46b706c332dfcfc677aaf61 19a00dfb633a0f88e903bb9b78e5e32c1f11e011 04b786943cdbc031a19cba1f503ae312f936d4dfd116bdb17bd538372938ba0b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/enfold/css/layout.css?ver=2 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 21559
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "1b1e8-5492a91601300-gzip"
last-modified: Thu, 23 Feb 2017 03:54:20 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: g61as5DNyWiF5wsSvZ3hFFvz4CetDjlMXSIGC3pJx-ertudgeVTxAQ==
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash16bbadb18616687351d4047aedc2ab45 979123c7ad6726befbbab2c07b50ecca31aa2d18 de8231c6ee426b7a76ebf574998dec11ce908efc0a745c2182fb7b61c5915e9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 16:42:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=2 | 54.230.111.19 | 200 OK | 7.6 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=2 IP54.230.111.19:0
File typeASCII text, with very long lines (20818) Hashd3369104b2439ab727a1e8b6cb361d2a 0c99633f0c742643a13a66aed4ad22c39cbb5d0c 52a6ae90714006abcdec4e137b978d3c846025e6ae8c20bbb05f1929dad6383f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=2 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 7594
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "51d3-5265225a07600-gzip"
last-modified: Mon, 07 Dec 2015 17:25:44 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: I2oAm9vnmOUogWxYPKB6vyV17sKXrnroU7qQt6KY5fB1hjnWBzXGUw==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold/css/shortcodes.css?ver=2 | 54.230.111.19 | 200 OK | 32 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold/css/shortcodes.css?ver=2 IP54.230.111.19:0
File typeASCII text, with very long lines (1454) Hash8c4ab8d07a9b9a61402ebcabc10d5f45 83fc4c7bc3de6cffaabb64faaa737aed188fa69e ba9f9c374a2d67f81ded5ebbe6d939d3432094d7cdbf9a560c29d41dab61ba39
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/enfold/css/shortcodes.css?ver=2 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 32129
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "2c3db-5493604043700-gzip"
last-modified: Thu, 23 Feb 2017 17:33:48 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FjNd7WuOi56Va6-_TCteGkNMTmi-9BH1jOYa-Qcmq6lTtXakvJ6fbA==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold-child/js/jquery-cookie.js | 54.230.111.19 | 200 OK | 837 B |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold-child/js/jquery-cookie.js IP54.230.111.19:0
Hashcc5cb6278a12484d147defe534af28bd 5df34febe53f6ec9b31d69f9fe52d7f5883ee434 92611ead73fc96eb242f16b42cbcdc9955c1b24cc00c9022be154c3f11c9eff7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/enfold-child/js/jquery-cookie.js HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 837
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "72e-506ecef09d200-gzip"
last-modified: Mon, 03 Nov 2014 04:39:36 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KSOzn2s8Cq7hsRTvxaOxoYJqukKSgZtnCAWQvrdgX74YZxnq78VfNg==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.1 | 54.230.111.19 | 200 OK | 540 B |
URL HTTP/2www.gaynorkennedycup.ie/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.1 IP54.230.111.19:0
File typeASCII text, with very long lines (1191), with no line terminators Hash2029090ac267ecfc20a3c0b884202de9 0ad1d2ea2030ad3c98315a8342168cb0e2c2fca1 a5f0b6001e19c189db4a985f7be8577804f4620edfc4e0812483cf571618607d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.1 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 540
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "4a7-5edbc4cac5212-gzip"
last-modified: Fri, 18 Nov 2022 10:37:59 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: crCet7Us6E0e9yAMI7_d4ETZoeMri8iY9le8bVLLkGR-aDE2hHnZxA==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.1 | 54.230.111.19 | 200 OK | 475 B |
URL HTTP/2www.gaynorkennedycup.ie/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.1 IP54.230.111.19:0
File typeHTML document, ASCII text, with very long lines (906), with no line terminators Hashc7aa8936938be0b65781455878aa2085 0066e0c5ed75b3ccd5bb01db5f373d995c217a29 a764eb4204428f671190ad2bc84bcbd86cd9a6bfd05a7ded46bceb651503c508
GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.1 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 475
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "38a-5edbc4cac5212-gzip"
last-modified: Fri, 18 Nov 2022 10:37:59 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -nP0p3DPS-qZ0YVZ_kCu5N6v-7nYWrS0RxNJgNBV0uphIx88a3IxWw==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/uploads/dynamic_avia/enfold_child.css?ver=637750a3adb57 | 54.230.111.19 | 200 OK | 17 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/uploads/dynamic_avia/enfold_child.css?ver=637750a3adb57 IP54.230.111.19:0
File typeASCII text, with very long lines (65536), with no line terminators Hash77ac87b929766c96823055c49a274eab dde93c004c76f1f09b94aa2dcbb5b166d4f67028 85216cd4c48e7cd877ea9291e96375eecc9bbeee82c0a7678d898826b3631dd6
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/dynamic_avia/enfold_child.css?ver=637750a3adb57 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 17416
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "24d31-5edbb5a35f62d-gzip"
last-modified: Fri, 18 Nov 2022 09:30:11 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jnz4AKrv9Q01Zec77nnnjVqIDcv1EhTBNUgtEgR3dPXHmeHYgKY7bw==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 54.230.111.19 | 200 OK | 31 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP54.230.111.19:0
File typeASCII text, with very long lines (65447) Hash1b5264c989379b828aff60f65a518a24 98641237f14ccb33ac114f54329a33bd0aa17eb7 6c8e7b78c6dbc13426810c905572db7589cf3e00264e30ce797fddb0b1092237
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 30995
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "15e54-5edbc4cac80f2-gzip"
last-modified: Fri, 18 Nov 2022 10:37:59 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NA30xT8T1WYQWQYq9VZgZTxgt6Y0BcAtXdt3iE6FNmdirq4Q5QBeKg==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/plugins/easy-twitter-feed-widget/js/twitter-widgets.js?ver=1.0 | 54.230.111.19 | 200 OK | 315 B |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/plugins/easy-twitter-feed-widget/js/twitter-widgets.js?ver=1.0 IP54.230.111.19:0
Hashba5fb353e53d214c47a1ee4be18f3716 8046a0fba8cd9ea23727a4627f4f1756bffe23d6 943adc23778fa2f788c5c8ec2d73bc0deadcbe83fc93e262927b5691d6e827ea
GET /wp-content/plugins/easy-twitter-feed-widget/js/twitter-widgets.js?ver=1.0 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 315
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "1e6-56ae6bc7520ef-gzip"
last-modified: Sat, 28 Apr 2018 11:15:20 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uF44hr4x36VbAJ83kxWHNtcSu92mBKYLuyTn8TNwLbsfbmSd30bTAA==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold-child/js/listnav.css | 54.230.111.19 | 200 OK | 689 B |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold-child/js/listnav.css IP54.230.111.19:0
File typeASCII text, with CRLF line terminators Hashbbd2ceba796fbd15279cd9d2c6ec247d 55458990131eb6db7f3ebcd7cbc83d0224dc1d93 41a48d89bfa858af39ddbc0a459f51ea1198fc85a0f926f6155053db26fea34d
GET /wp-content/themes/enfold-child/js/listnav.css HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 689
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "6fe-56d94d5328ac0-gzip"
last-modified: Fri, 01 Jun 2018 13:48:03 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Mq_VIct3OkUlnN3tMSB84g6ArXmOZQnuWccP_ajrTAySV0ulGAEA9Q==
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.100 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.100:0
Hashbfff4aeca3db26875d36eb3b2c0dd8bc 995540c7ed7c0a0a1dc3dd5fbc4c1b9fea7fc7ed f763bcad0ae27a180d5108f02f22e7318002a55bc246a24eea184c1658938d8e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=90036
Date: Fri, 18 Nov 2022 16:42:40 GMT
Etag: "637672ad-1d7"
Expires: Sat, 19 Nov 2022 17:43:16 GMT
Last-Modified: Thu, 17 Nov 2022 17:43:09 GMT
Server: ECS (bsa/EB1F)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ---cI5URBUAEtu2VxDxPrrFxDu507lHnVrDv0wQ8pz0TI670sF9GBw==
Age: 7
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold-child/js/jquery-listnav.js | 54.230.111.19 | 200 OK | 4.1 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold-child/js/jquery-listnav.js IP54.230.111.19:0
Hash6f495f79ff0529e8544f27e896e83c66 74273a8fba0bbfd47b6bf63f1b0e51eed4597aa4 66e73b65e9a3dc4cc5d659e33fe3b3c31651a4020ac6753c47f796dcf987be4a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/enfold-child/js/jquery-listnav.js HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 4141
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "3c5a-506ecef09d200-gzip"
last-modified: Mon, 03 Nov 2014 04:39:36 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JEECDHlpIdG7yIpzfNetsTQtTc9a1vlqUpCFhDCQvUtAPN8gFuqajQ==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold/js/shortcodes.js?ver=3 | 54.230.111.19 | 200 OK | 36 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold/js/shortcodes.js?ver=3 IP54.230.111.19:0
Hashac676e649a4cc927d52971fe780c48d7 076d81e3622ec4aeaf4a4fcca1a256bcb89a00a7 0eeb198e6f534cd642d6c93e11e50f5fb15590c5ab087324a42031b344fb4371
GET /wp-content/themes/enfold/js/shortcodes.js?ver=3 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 35569
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "24d6d-5493309cad200-gzip"
last-modified: Thu, 23 Feb 2017 14:00:40 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Hls1OyWRVizXKyCAeshZZrPtvKdI8Wy57wMNz8ezs7Tf_gJGY237Vg==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 | 54.230.111.19 | 200 OK | 5.0 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 IP54.230.111.19:0
File typeASCII text, with very long lines (15660) Hashe6624e0b978e6ddba476be41aaaa82df 822e920d8233072110ed7c8a7f379e5b13209b18 dac86a9ce08e4d8cded47b4fa900a664b0c997d8910c2a1be54a423678925a41
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 5009
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "48b9-5edbc4cac61b2-gzip"
last-modified: Fri, 18 Nov 2022 10:37:59 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5gOk8UEJig-TVjHWf587y0tui8m5m0Ed_dgH6XvgiP9CAlP46o6cPQ==
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 |  | | 472 B |
IP:0
Hashfeaeba711c7421b074e726f89ff34e0b c590c0b76a7a78ab51a4dabcd8f20a1b172b02fb ebe6e312ea7116713547fbd756805843b1c242ad22269158a79305f1819fa990
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.kennedycup.ie/wp-content/uploads/2022/05/footer-logo-n.png | 54.230.111.28 | 200 OK | 60 kB |
URL HTTP/2www.kennedycup.ie/wp-content/uploads/2022/05/footer-logo-n.png IP54.230.111.28:0
File typePNG image data, 200 x 199, 8-bit/color RGBA, non-interlaced\012- data Hashcef3ac5b08c582352c236a81d088daaa eccd5eabd7d876492692161a2724b12b099ef5d5 5c5566615b90d43adb5cc78271bc113b7a2ea8c81a14c309e355d3fc7d94816f
GET /wp-content/uploads/2022/05/footer-logo-n.png HTTP/1.1
Host: www.kennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 59756
accept-ranges: bytes
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "e96c-5df70ff4c7ed5"
last-modified: Fri, 20 May 2022 12:54:56 GMT
server: Apache/2.4.18 (Ubuntu)
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eSGUDIYzF98aIXt8HpdzRY7NtxvMIPg3Q7itRvdBWjEHHVVKcUyRvQ==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold/css/print.css?ver=1 | 54.230.111.19 | 200 OK | 1.6 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold/css/print.css?ver=1 IP54.230.111.19:0
File typeASCII text, with CRLF line terminators Hashd68f211c52ecc84d2382de00659ed06d 1a975305876356ffd33639ad7dcc570706de8260 429a8ffa231d09c049b2ddd054ce93174cba70634ad23e7d2859a4d8c2de6889
GET /wp-content/themes/enfold/css/print.css?ver=1 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 1643
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "12fa-526522581f180-gzip"
last-modified: Mon, 07 Dec 2015 17:25:42 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Xkv4IVz4QzO7koP5nw-lraI7AGCRGIKaWUGRmoRTxAdePSJqF6mXeg==
X-Firefox-Spdy: h2
|
|
| www.kennedycup.ie/wp-content/uploads/2022/05/sportlomo-n.png | 54.230.111.28 | 200 OK | 5.3 kB |
URL HTTP/2www.kennedycup.ie/wp-content/uploads/2022/05/sportlomo-n.png IP54.230.111.28:0
File typePNG image data, 116 x 26, 8-bit/color RGBA, non-interlaced\012- data Hash6cacfce268db3556e4ab048d7d4e9cc0 c8a98516f6d870ccc93ca5b3d3142bc72854167b 8dd52c0e592a22d4dbf9d06d758ce9c574e1165c33feb551d672a74025664d22
GET /wp-content/uploads/2022/05/sportlomo-n.png HTTP/1.1
Host: www.kennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 5253
accept-ranges: bytes
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "1485-5df7101946ea2"
last-modified: Fri, 20 May 2022 12:55:34 GMT
server: Apache/2.4.18 (Ubuntu)
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SxJmn17LAjmu4XsPycyf-hvxCmsm6yZB5w3BFmv2iRgff9pWfvG8DQ==
X-Firefox-Spdy: h2
|
|
| www.kennedycup.ie/wp-content/uploads/2022/05/main-logo.jpg | 54.230.111.28 | 200 OK | 30 kB |
URL HTTP/2www.kennedycup.ie/wp-content/uploads/2022/05/main-logo.jpg IP54.230.111.28:0
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:05:20 18:21:24], baseline, precision 8, 84x84, components 3\012- data Hashf00f7c0899679e37a99f4bed3e4ab6e2 ac686e9377100a6f6dd192b5cd0aaeaf433db364 ae6800a673a9676a45cec1e78e751824f6c77f29efe2547d87c1e382351ce51a
GET /wp-content/uploads/2022/05/main-logo.jpg HTTP/1.1
Host: www.kennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 30503
accept-ranges: bytes
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "7727-5df70ff75e0d3"
last-modified: Fri, 20 May 2022 12:54:58 GMT
server: Apache/2.4.18 (Ubuntu)
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: M5x4XYz7XetWn6enVNgr-DMHcqmPifzkq6YZYXzRpLQ5GiH1O1Bw7g==
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.100 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.100:0
Hashbfff4aeca3db26875d36eb3b2c0dd8bc 995540c7ed7c0a0a1dc3dd5fbc4c1b9fea7fc7ed f763bcad0ae27a180d5108f02f22e7318002a55bc246a24eea184c1658938d8e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=90029
Date: Fri, 18 Nov 2022 16:42:40 GMT
Etag: "637672ad-1d7"
Expires: Sat, 19 Nov 2022 17:43:09 GMT
Last-Modified: Thu, 17 Nov 2022 17:43:09 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QQzzIeVSqDZE7LAruqfxb1C1mFlMG-xb4wqvIYKoGWTuqLQk7aBnKQ==
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash71821131fa0825a241bb6f95ad63a26a 4c676dbf861c2fca225bd1b9620237246ddfc724 f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 16:42:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.100 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.100:0
Hashbfff4aeca3db26875d36eb3b2c0dd8bc 995540c7ed7c0a0a1dc3dd5fbc4c1b9fea7fc7ed f763bcad0ae27a180d5108f02f22e7318002a55bc246a24eea184c1658938d8e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=90029
Date: Fri, 18 Nov 2022 16:42:40 GMT
Etag: "637672ad-1d7"
Expires: Sat, 19 Nov 2022 17:43:09 GMT
Last-Modified: Thu, 17 Nov 2022 17:43:09 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 08xLbEqVKDxH4tnmd315bQHhwaOOBNCHBSaN0L5ci26c6q41zIF85g==
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold/config-templatebuilder/avia-template-builder/assets/fonts/entypo-fontello.woff?v=3 | 54.230.111.19 | 200 OK | 31 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold/config-templatebuilder/avia-template-builder/assets/fonts/entypo-fontello.woff?v=3 IP54.230.111.19:0
File typeWeb Open Font Format, TrueType, length 30804, version 1.0\012- data Hasha1aeb367498d7280cd2246f4974e988a 57058b69ea614e2bdee874e882a92c4f32058c4d 75e801b453bd677c68d4af036055b3036b8fc0390a76bf4661ab50e22b1137ee
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/enfold/config-templatebuilder/avia-template-builder/assets/fonts/entypo-fontello.woff?v=3 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 30804
accept-ranges: bytes
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "7854-526522581f180"
last-modified: Mon, 07 Dec 2015 17:25:42 GMT
server: Apache/2.4.18 (Ubuntu)
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1QFxYXMlq4TpOfnEcCqK5_4LqT-AbZQDmngy8uBYj5FtM5Gxx27m_A==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold-child/font/Montserrat-SemiBold.woff | 54.230.111.19 | 200 OK | 100 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold-child/font/Montserrat-SemiBold.woff IP54.230.111.19:0
File typeWeb Open Font Format, TrueType, length 99508, version 6.1\012- data Hashb4acc95ad5939971cf7ebd99be522d59 fea33f9b5cd812f8a4cd7aee6fac1bf2d36bb178 6f8b44597e37ddf234b530102e9bfabd1b121124add32a8877dfabe20b0e5da1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/enfold-child/font/Montserrat-SemiBold.woff HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/themes/enfold-child/style.css?ver=2
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 99508
accept-ranges: bytes
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "184b4-5567456ae1e80"
last-modified: Fri, 11 Aug 2017 06:22:34 GMT
server: Apache/2.4.18 (Ubuntu)
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FlCepNyMFOWyo5dt0o_HN7IxpN8kWgshoMZhc1OVaK3_Y6P2b5jaUQ==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold-child/font/Montserrat-Light.woff | 54.230.111.19 | 200 OK | 99 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold-child/font/Montserrat-Light.woff IP54.230.111.19:0
File typeWeb Open Font Format, TrueType, length 99076, version 6.1\012- data Hash5dddd7939bcc82989070344f8f529860 d32c49c0fb8e3bb5ce6c774fc2aa4cbd1058d40e 1d194505082852ee6ec7db2c7300515e5db78d50287fbd095221bb8b8d2b28f1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/enfold-child/font/Montserrat-Light.woff HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/themes/enfold-child/style.css?ver=2
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 99076
accept-ranges: bytes
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "18304-5567456ae1e80"
last-modified: Fri, 11 Aug 2017 06:22:34 GMT
server: Apache/2.4.18 (Ubuntu)
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lIufQvnytQ0PAhLE3rragv0Iah6g1P5SaPPBmzkNz2AP6k3OaycYEA==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold-child/font/Montserrat-Bold.woff | 54.230.111.19 | 200 OK | 99 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold-child/font/Montserrat-Bold.woff IP54.230.111.19:0
File typeWeb Open Font Format, TrueType, length 99064, version 6.1\012- data Hash17ba62a2566eba556713c2572d7dc551 f734963b80a42be4b0d969b15377e03096acd31e 788ae49855e57a463dbf1ae11cd9cf3e218e3c8ec0e67ffb46fdb53bfb871428
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/enfold-child/font/Montserrat-Bold.woff HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/themes/enfold-child/style.css?ver=2
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 99064
accept-ranges: bytes
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "182f8-5567456eb2780"
last-modified: Fri, 11 Aug 2017 06:22:38 GMT
server: Apache/2.4.18 (Ubuntu)
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -RcdfcIVjpWFMY7i-etmIZProdswL7A50BdGdLqEtXyzjHXGxwjgNw==
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 | 54.230.111.19 | 200 OK | 100 kB |
URL HTTP/2www.gaynorkennedycup.ie/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 IP54.230.111.19:0
Hashe84cac9e58dc7c5d7b2a1f81c0ebd903 46ca5fb678697e648d8d0d291dd47867e732d39a 5d93f0fd080319fb39c75864ba8c39857e708ca46549d3f28de0e80862d24401
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 38789
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "26935-5edbc4cac5212-gzip"
last-modified: Fri, 18 Nov 2022 10:37:59 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3aN9-08UowTRfyPy-dz4r-X2ttGd3xh-9eoY8gXyEQWLYEzclEdmag==
X-Firefox-Spdy: h2
|
|
| platform.twitter.com/widgets.js | 93.184.220.66 | 200 OK | 29 kB |
URL HTTP/1.1platform.twitter.com/widgets.js IP93.184.220.66:0
File typeUnicode text, UTF-8 text, with very long lines (33915) Hash7899fffaf0046efb7f9be2495d9dc928 d4c60d88e8deea577a50f9d20e1b6b3a20cba2cf 07d50450f22df0588cc1b67f5a124cb91d99a032a229586eb7dc490cce9f7f30
GET /widgets.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 607
Cache-Control: public, max-age=1800
Content-Type: application/javascript; charset=utf-8
Date: Fri, 18 Nov 2022 16:42:40 GMT
Etag: "6633f9603c759c40d9b200995454f17c+gzip"
Last-Modified: Wed, 02 Nov 2022 19:43:37 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F711)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
x-amzn-internal-status: 304
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29221
|
|
| www.kennedycup.ie/wp-content/uploads/2018/04/sitelogo-80x80.png | 54.230.111.28 | 200 OK | 16 kB |
URL HTTP/2www.kennedycup.ie/wp-content/uploads/2018/04/sitelogo-80x80.png IP54.230.111.28:0
File typePNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data Hash155c2222b393ac4304d4f13e6141402a 61ef5b3a18d6c260d1a221042077cded9c13a0a8 0a29f4a58bb0b5b10298c78c61c15877fcbc157aa3b23ced8a24716be9dafd7c
GET /wp-content/uploads/2018/04/sitelogo-80x80.png HTTP/1.1
Host: www.kennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 16366
accept-ranges: bytes
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "3fee-56aa56535f798"
last-modified: Wed, 25 Apr 2018 05:18:03 GMT
server: Apache/2.4.18 (Ubuntu)
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HG6LsW0PGuRQy4tNm4Zlqcx2qYlRJcc1L8OZGl-Y5z5wD90w2EFkXQ==
X-Firefox-Spdy: h2
|
|
| platform.twitter.com/widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=https%3A%2F%2Fwww.gaynorkennedycup.ie | 93.184.220.66 | 200 OK | 105 kB |
URL HTTP/1.1platform.twitter.com/widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=https%3A%2F%2Fwww.gaynorkennedycup.ie IP93.184.220.66:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (56168) Size105 kB (105445 bytes) Hash2b4968b185495eddda0d85b2351ebb71 c665785ca0f4039f8c71d94631cd50a879d866b5 eb8af089d8082a58a6e90fedc23007f17a9e89ddbc6a29b6e535e4847ba94160
GET /widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=https%3A%2F%2Fwww.gaynorkennedycup.ie HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 1362107
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Fri, 18 Nov 2022 16:42:40 GMT
Etag: "50d73c0b4a4c7e4697b9c6ac6f1ecd75+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:59 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71D)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 105445
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 314 B |
IP93.184.220.29:0
Hash91806fcefe92ede218764dad1b9855e2 0a2be11170e86a144aa75176c27c65400574a413 0484d2f00248f2ed92e55b29bde91fb66959f5933df7161f4319fa9b99baa9af
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5929
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 16:42:40 GMT
Last-Modified: Fri, 18 Nov 2022 15:03:51 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 314
|
|
| syndication.twitter.com/settings?session_id=fa2ef76b7ca14650faec7a500647b16b9c62495e | 104.244.42.136 | 200 OK | 374 B |
URL HTTP/2syndication.twitter.com/settings?session_id=fa2ef76b7ca14650faec7a500647b16b9c62495e IP104.244.42.136:0
File typeJSON data\012- , ASCII text, with very long lines (913), with no line terminators Hash925c2a7587f39436ea29513221652474 695b7f2f3d99f407bcdfd0b372db0e28193cc60c 62e36e14e5c219119cb51c3cdf43a2005512a1bd6ebf2d68d0c610a2e6e3ef0f
GET /settings?session_id=fa2ef76b7ca14650faec7a500647b16b9c62495e HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 18 Nov 2022 16:42:40 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Fri, 18 Nov 2022 16:42:40 GMT
content-length: 374
content-encoding: gzip
x-transaction-id: c478e302d23aa335
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 109
x-connection-hash: 0136311b7e646090480e007e2b440ed757cdc4a22fa58893919372fa5d50a7db
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf7c5da16d7c4384a4c2454d6b0d84710 69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10865
Expires: Fri, 18 Nov 2022 19:43:46 GMT
Date: Fri, 18 Nov 2022 16:42:41 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf7c5da16d7c4384a4c2454d6b0d84710 69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10865
Expires: Fri, 18 Nov 2022 19:43:46 GMT
Date: Fri, 18 Nov 2022 16:42:41 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf7c5da16d7c4384a4c2454d6b0d84710 69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10865
Expires: Fri, 18 Nov 2022 19:43:46 GMT
Date: Fri, 18 Nov 2022 16:42:41 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf7c5da16d7c4384a4c2454d6b0d84710 69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10865
Expires: Fri, 18 Nov 2022 19:43:46 GMT
Date: Fri, 18 Nov 2022 16:42:41 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg | 34.120.237.76 | 200 OK | 7.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb2b393e36ee2c9649d90db136aa49542 e88c5832ff0c49bab181d948c3a510d88343bb6f 8b524701df43bff56ac52a021ff0fbd964e06f00e84b4861aa557ec6ae6b4ffd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7631
x-amzn-requestid: b47e545d-1fb6-4a62-ab45-28cdb9d3f0b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-vQE0XoAMFS3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab2e-56365eed3d4c082c53b172b3;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:44:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qpoQa1Lhe-h27dGooXDCtujesSTg7Tb0Ov-PNLnUP0288ZofwHxkhQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:24:12 GMT
age: 65909
etag: "e88c5832ff0c49bab181d948c3a510d88343bb6f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg | 34.120.237.76 | 200 OK | 6.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha9d32fa3866dd741de610a61a93ad893 4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e 4492338de536cfae6fb42fd37170c60f4fbc281a2a924efe6d2b5af352cd102c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6344
x-amzn-requestid: cac35b04-be3b-4ae1-bb5e-8cedcd7a7db4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btqOVFCXIAMFcOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63755728-45c28fa333b748520be29b57;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 21:33:28 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: RQqPegf6sdVW0qmrGnUo6EORLuT7BRikwhtF08LAxWNCpLGwGZnG8Q==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 b48dedcc55e63f14261aa92cf2d61522.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:34:03 GMT
age: 68918
etag: "4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash35da1192dcadc6e329a9e60c16904301 90a146aef85765630a5e09e46a0a8682e204bec1 816d1387a3a91a82f0bdaa2b703b45aa30be206d30d4dd1e8ac5deca13de57ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10281
x-amzn-requestid: 11dffc4e-71d7-4195-8890-62c8a2092728
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-77EWaIAMF3WA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab7f-3c0dc7e43023af827ac26958;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:45:35 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Xbau-BXu_W5Hu8QaCg3tvwfYMb_8L8F_muNp4gVukeNTmiDW4BAXhA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:24:03 GMT
age: 65918
etag: "90a146aef85765630a5e09e46a0a8682e204bec1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb1ea6fe-f968-42eb-9bb6-5965ae4e6ce6.jpeg | 34.120.237.76 | 200 OK | 7.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb1ea6fe-f968-42eb-9bb6-5965ae4e6ce6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe5fb6d72b647aabea33ab4017f4a0847 ed93ac946111340a254b92f8ce27e8be93ae87e8 0782ed4ffaea8f9487461d5a9b0c241d30dfe057676753b24e180d0a94efad99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb1ea6fe-f968-42eb-9bb6-5965ae4e6ce6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7045
x-amzn-requestid: e8dace8b-0cc8-4ea0-b47a-e42a66576f72
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-K3EuCIAMFsmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa45-71c191e462be52006858817b;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: S0Sq8vuP-MbcuYVx_WFXTkmrY966mBTY1Qpowx_E_to1tDk1b8R-Bw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:52:11 GMT
age: 67830
etag: "ed93ac946111340a254b92f8ce27e8be93ae87e8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg | 34.120.237.76 | 200 OK | 3.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5d0b6106f00f9fd8b89c2d484a559a1a 399ac393209dcdac7d2188d7aa8d95f04570ef7c 5d8151c9eb558f4a2b8bd2952c6845606ddb0c27e36f6e49aca7e60908cd9fe4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3759
x-amzn-requestid: 8c91ac59-89dc-4218-b69f-0cebb29f301b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-wJHgxoAMF-hQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab33-4dac305614a92bc52c038222;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:44:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Mb2-PTjNmt06Wd5jOjQ5WoLY-0NgI80CKPXtwgzBt4n5km8Pu_WN0Q==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:08:54 GMT
age: 66827
etag: "399ac393209dcdac7d2188d7aa8d95f04570ef7c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash032386e5c9dffff1ba1ee5e8a322d438 dd4fd6c803a9b333bace9a541c6bd183d0c56bb9 0e9f559a0aa7e114c5810a27ba243c0da7b44dc0bf7aec2b7ab32b8f0e2b536c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: 4778d1bd-28c3-4665-89da-046e356087f0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyD1HE-oAMF0QQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-53c7330c5fd36d3c4d9e6aed;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CHi9V7-WaWmG6Y0249CZJnhe_RjvleaGFVXoOnJ62cjrcXoLLKwzgw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 07:20:30 GMT
age: 33731
etag: "dd4fd6c803a9b333bace9a541c6bd183d0c56bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans:400,600 | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Open+Sans:400,600 IP142.250.74.10:0
GET /css?family=Open+Sans:400,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 18 Nov 2022 16:42:40 GMT
date: Fri, 18 Nov 2022 16:42:40 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.gaynorkennedycup.ie/wp-content/themes/enfold/js/avia.js?ver=3 | 54.230.111.19 | 200 OK | 0 B |
URL HTTP/2www.gaynorkennedycup.ie/wp-content/themes/enfold/js/avia.js?ver=3 IP54.230.111.19:0
GET /wp-content/themes/enfold/js/avia.js?ver=3 HTTP/1.1
Host: www.gaynorkennedycup.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gaynorkennedycup.ie/wp-content/plugins/fnctaez/wr/red/wa/e99fe90b337c70fa02dd11a40f81c9cf/seleccione_medio_de_pago.php
Cookie: _ga_LREW1GNB0J=GS1.1.1668789720.1.0.1668789727.0.0.0; _ga=GA1.1.564360548.1668789721; PHPSESSID=pcfka0n1mbgvgsn4qme7i1b0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 31241
accept-ranges: bytes
content-encoding: gzip
date: Fri, 18 Nov 2022 16:42:40 GMT
etag: "1c1be-54935b3e86700-gzip"
last-modified: Thu, 23 Feb 2017 17:11:24 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fAP7qBypl2-pESFxHsJNx0rHNUuXwdlP-bBMEPwCNd7SMAoMtAuIag==
X-Firefox-Spdy: h2
|
|