firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 27 Sep 2022 20:15:31 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cm0Z0Wq6UoBlPo-CTT6i-Lc8Yp5mQD-GMkW5-IQ7ztzrJz_kPX6jqA==
Age: 2260
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8777
Expires: Tue, 27 Sep 2022 23:19:28 GMT
Date: Tue, 27 Sep 2022 20:53:11 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kXpRHMY7AmoUTP_xDGBI7WkpLX1RcT8PM-pAAXJPd4usuiaXjP6HAQ==
age: 41338
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 20:53:11 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
200 OK 54 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12698), with CRLF line terminators
Hash 73476a6d2fea7f25f84e5944716ef05f
dd5235eca21d86d1e4d6d5b705f859878d308ce6
3b2dc3fc407703029128ecdc3409e6bcce12f47020ebff84f2c265571dc5440b
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/em.php?cmd= HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:11 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311991746574
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/s94156880752687.js
200 OK 1.3 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/s94156880752687.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4010)
Hash 45d56fe0afe17d104aeedba93a637ac4
b976e339b8cbb7990ccf21e1f80fab11a16c25c6
c6375806f6589789620e3c5bc7b3a6c67bf525dff15e87486e1f2c1ddef3c5c5
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/s94156880752687.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992062246
Content-Length: 1347
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/styles.css
200 OK 34 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/styles.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (46290)
Hash 0b75e309ae3a1c260a39f10b2bebc3dd
25d71a0e479330848e9db0cbdd99d369d8be0b49
37f6a40f8f1b5309614e01d0e1ea6c5dc0fa44cbe14e46a0b64f0f84ac8eeee2
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/styles.css HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 18 May 2022 18:44:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992136401
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/AppMeasurement_Module_AudienceManagement.js
200 OK 11 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/AppMeasurement_Module_AudienceManagement.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type exported SGML document, ASCII text, with very long lines (24962)
Hash f9861fe6306a4440ab36c596685a1ae4
a81a22945e5a8cdceb288aef4fd28db207d546da
4a8fe05a9638e825e453e5561ff56c5db2361c58414362a1617086f88a7b31bf
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/AppMeasurement_Module_AudienceManagement.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992190265
Content-Length: 10876
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/RC5c7ea78b436c45038bcc61c2a198e02e-source.js
200 OK 1.1 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/RC5c7ea78b436c45038bcc61c2a198e02e-source.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2226)
Hash f69500055c5d9fc89cd1c3b9c248ed74
fa3a4050abc4efb1b932d5d96f952b451a3e3538
43f6ecfc240388eb5bc375f8f568a9b69a3010c4b30ac813b32aef61c366629d
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/RC5c7ea78b436c45038bcc61c2a198e02e-source.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992189112
Content-Length: 1100
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 11b1f146fa6fa4a88b1efc65b548fb73
f3f12e14f8f66a2e7c43015c394af199e4a94e06
74441efb7e39672af50ce0b6190b20d20bc3ae744b415a17f8b96a0f89aa0491
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 20:53:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/RC1e56fd697cbd42fa97a5bcfe3f3781c1-source.js
200 OK 1.7 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/RC1e56fd697cbd42fa97a5bcfe3f3781c1-source.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3243)
Hash 9fcd0c63701bd20f58a8cf86e7f1a904
0be4a6ac011f523151e27576b529c9b75d6a5cba
6972c7b59ad9f96f6fa4cfb96161f70a025d9f4bb2605b97e9e788d144d7cfc9
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/RC1e56fd697cbd42fa97a5bcfe3f3781c1-source.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992275566
Content-Length: 1671
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/AppMeasurement.js
200 OK 15 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/AppMeasurement.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (32766)
Hash ec915b6a3b95fb6c30e0617c4759a78f
4151f5e7fc41e9e20a522f7fd2c63699e37360e0
4bb349d0a5a549c873c2f1f7093131e7b4fb26eddcbfd84769b0f2041b42296f
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/AppMeasurement.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992186212
Content-Length: 14928
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/RCab335366d32142a3a4f86ea7712fe501-source.js
200 OK 789 B URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/RCab335366d32142a3a4f86ea7712fe501-source.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2194)
Hash 6249dfb113ee405720d19b2b3663235e
dba797d67a3ddfbb3c3ff3f9c0ec50f7668c2577
2cde5b90891234e272c591f23325db4dfb07233e11dd94f7431c923e5a972423
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/RCab335366d32142a3a4f86ea7712fe501-source.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992320137
Content-Length: 789
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
fonts.googleapis.com/icon?family=Material+Icons|Material+Icons+Outlined
200 OK 882 B URL HTTP/2 fonts.googleapis.com/icon?family=Material+Icons|Material+Icons+Outlined
IP
Hash f4f02a67dd3f27367fc860a0f7e614cf
f8c7ae4060e169bb8becdfa5b527ee2b92444a2d
c0af5aca116377bc61c2d4829275681f941e73a35d10f42b0868b2d3b1ef1f5e
GET /icon?family=Material+Icons|Material+Icons+Outlined HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 27 Sep 2022 20:53:12 GMT
date: Tue, 27 Sep 2022 20:53:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/12.js
200 OK 22 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/12.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (56331), with no line terminators
Hash 3e4b29b865aa49e223ff906a2fc00968
015597535d3165029c4e4b9a763948b1b6986277
7750dbca7ce90bca77f925bdc3b194138c82fd4b3bed52553938761c77c92e79
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/12.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992403063
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 27 Sep 2022 20:10:46 GMT
Expires: Tue, 27 Sep 2022 21:07:13 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9bZXJKTFD8ShS3fq9evdzCMB6eRCBhWwCJ1AmPt4qNE9yxTT2_7M8Q==
Age: 2546
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/RC43d94eaa55c14bc4b5c3550f47c01195-source.js
200 OK 1.3 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/RC43d94eaa55c14bc4b5c3550f47c01195-source.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3874)
Hash afc2d4050b923291e3e6ffd9835e433b
d9c87d165ae943bd6d1f1d95803696e1fe63d344
4a2485286e3e8c31b7132238ff0f507d237657165f8d0d51e1fd78c0c34966dc
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/RC43d94eaa55c14bc4b5c3550f47c01195-source.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992468168
Content-Length: 1297
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/tag.js
200 OK 9.1 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/tag.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (21652), with no line terminators
Hash ff5a1baedd30f131b97f3c012245e423
750abb823d81773ea6546d93dff844a1752cfe20
db6299bc5bc23671fc25dd62a5acd79d69a9cbc10d0d6a4052aee8f30b8d6e62
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/tag.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992320415
Content-Length: 9066
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/4.js
200 OK 835 B URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/4.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1754), with no line terminators
Hash e040973bf37be947598fc46e33fe4453
a6c9f4770f4719741471ab72d50e4559199d5b31
83658289e17616ed9b77c0b3a3b8731634ce7745b7913eb3ab28be0ba63c7926
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/4.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992532642
Content-Length: 835
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/launch-a297eee1f591.js
200 OK 115 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/launch-a297eee1f591.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (32763)
Size 115 kB (114869 bytes)
Hash 044d90c135f82aba83e0a9655bd96ac8
d4202ab88b2f96a1e782b71c48cb1bb468b545a1
92364333e4c9eebb5bd347b51a778a4ee8421f6deb0bad637de4daadad2d7250
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/launch-a297eee1f591.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992182875
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/1.js
200 OK 9.0 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/1.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (28484), with no line terminators
Hash 3745ac15fe2d6ea6f30dccaff34e3ffb
eb37a11cdf885eab4ee64fca165b15ceebc912cc
7a587678a359302d2cc53256f36962d5f94939872b36a32ad4b697515dcf7461
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/1.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992594094
Content-Length: 8965
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/RC5a52a9672ce34a87955f552653e96cab-source.js
200 OK 265 B URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/RC5a52a9672ce34a87955f552653e96cab-source.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash be2c6ca98afb21102d8c20b05d4a0f55
708f5793f9cf9ab3bba4088347354c0636245bb0
25c761c85c6ff0ce2cc2ad3eeccb9d557c3b6787ee8dc2ed22618e1ce91ac8d7
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/RC5a52a9672ce34a87955f552653e96cab-source.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992606696
Content-Length: 265
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.digicert.com/
200 OK 471 B IP
Hash c18823050f86339eaa73ddb1bf80d64c
ac4ee81f59f706cee8a74458d498bbc20d8d351a
9a505647517bd02d8ff994fd4ad98dc2f4b519916145b0c327691420c1084c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4489
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 20:53:12 GMT
Last-Modified: Tue, 27 Sep 2022 19:38:23 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/RC25bf516d064448bc8e84dd801b62e1fe-source.js
200 OK 1.8 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/RC25bf516d064448bc8e84dd801b62e1fe-source.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5070)
Hash 33fdb88ce7687363256e8f6c36d117ea
f46240bf186c9dafff2753fe693cd1b577bd5fb9
cc43b84039ac9ab53fee9060dc210e4ec050d2325e0da41a0685da4d85d6a9ac
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/RC25bf516d064448bc8e84dd801b62e1fe-source.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992660064
Content-Length: 1761
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/truist_common.js
200 OK 126 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/truist_common.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65536), with no line terminators
Size 126 kB (125725 bytes)
Hash e2718371114c7c6aeb1291aadf471ea5
374e4a82df9f58b8a72f7d908c2bb0d702b1778e
47188f24e23cee909104e772109897fadf4d5e00afeb68ead9d52406fe013d4d
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/truist_common.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992184484
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/runtime-es2015.js
200 OK 1.2 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/runtime-es2015.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2314), with no line terminators
Hash 593afc0666680ecc85ee203665cb6f9d
ae0b3eefa12ccec35ef43b8199795cad6d679318
55f001529de48bb1ca40c9a17eafab8acd6b5496b234fc3c8633333cd02d090f
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/runtime-es2015.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992729367
Content-Length: 1200
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/polyfills-es2015.js
200 OK 15 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/polyfills-es2015.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (37015), with no line terminators
Hash 375e24de4792e3c8c4e271dbc2b69b6a
e6e0e45bf7ab545dae034f2c5bfa7da051574c0f
8efda1456b984d07e583002e5138571754dd3db9c91b5f6c3423723fdacbaa2d
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/polyfills-es2015.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992730204
Content-Length: 14985
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/scripts.js
200 OK 3.3 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/scripts.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9633), with no line terminators
Hash 74f96498fa95924d4bbe357af9644efc
c513dd927c78b85a60e66aec92d72929c2621d6e
faa31dc7409918326eef2a608c1bbdb98432a4dffbd5ca12a5661564c213bd8d
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/scripts.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992788378
Content-Length: 3327
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/a
200 OK 7.3 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/a
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6749)
Hash 4e858f13f272e425b30328e401971e36
66477693677f36d7608076b7f8387a1a6d16d091
6fcb5dbe22360fc43bb796b393119b1c1fe73a8ce2ec75e9bbb0f1c2964855af
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/a HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Content-Length: 7250
Vary: User-Agent
X-Generated: t=1664311992816413
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/s95302694272683.js
200 OK 1.3 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/s95302694272683.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4010)
Hash 0b9e253e3420596a01741f73dc9a29e8
81f1e067d3c7f3547f22267a0f13f4dc3f9988b3
a1e968ae9d272a05b2a714629db71aede11ec8ed3c6a87c6741065581707adf9
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/s95302694272683.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992817688
Content-Length: 1348
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/css2.css
200 OK 1.2 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/css2.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash f0d4941a65f105abe3ea6d18a65c08c7
1fad6cf97435e9dc704492c055d8f42c2dca4ee2
2ff9b7703cadb74c836977e12715b70a05413257ffc017e0d77b6579e1c71d0f
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/css2.css HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992854805
Content-Length: 1162
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: text/css
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/icon.css
200 OK 335 B URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/icon.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash ab5e47d585045d5d6d16fb64b63dba4d
98c58391fc518d1f029beff649f1bbcc1964bfac
6e93669e7eb33940a8ac58b1a316c923f29a5a048dbea773cec0501b0f0d0346
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/icon.css HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992858363
Content-Length: 335
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/css
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/css.css
200 OK 1.1 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/css.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 5aeec684d0dbee9f6a80b77140de3c60
a399168ed51bcda32a9eba5af1837587a7a86274
0f04e519321829f60240bd7800246b12506a5ebec659db9c2676a68959023865
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/css.css HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992920071
Content-Length: 1098
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: text/css
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/InfoBarModule.js
200 OK 2.4 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/InfoBarModule.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5783), with no line terminators
Hash 027f45210772f48ddef50e08eccf458a
40089cef0e47466a148c26fa618150f82dff6fb1
288d5571278736b58e6181c6b9da7d05d14d2f31d624f0cd2993852f9927571b
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/InfoBarModule.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992951628
Content-Length: 2396
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/CoreModule.js
200 OK 38 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/CoreModule.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65536), with no line terminators
Hash 10742835b91f18a460a6f6515528e7f9
2c6eca746b282efd36324c5caa743b73ef4f1e0e
6e408a75f25e95ed76e37951f676fcffb9f88beadbdb870c694ebea4a236f43e
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/CoreModule.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992943596
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: P8lzhhHVzJn2XjGJZiD+Rg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: OAFIZu8bCSmWWB/7t2Ou87yEXEA=
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/storage.js
200 OK 16 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/storage.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (38562), with no line terminators
Hash d0ce3981422e4776f97077c91f69628c
35f3f980b30353b8452f8a7bc08b42b02b538f82
9ec00d22424a6b424b1ad4d924823f470cc2232b719fe658585e714584718898
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/storage.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992980450
Content-Length: 16166
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: application/javascript
assets.adobedtm.com/extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement.min.js
200 OK 12 kB URL HTTP/2 assets.adobedtm.com/extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement.min.js
IP
File type ASCII text, with very long lines (32766)
Hash ef1dca45932932a17b01c4b6946f6042
0f0f0501b7d48e1e2b2aead666d9b9b59c07720c
37d818de56459121621e8df2e54ff42109e6ac62fab1ead9aae508fab006073d
GET /extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "f259ee6445c19c2ce3c64a1b117a4f35:1597270192.577101"
last-modified: Wed, 12 Aug 2020 22:09:52 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 12184
expires: Tue, 27 Sep 2022 21:53:13 GMT
date: Tue, 27 Sep 2022 20:53:13 GMT
cache-control: no-cache
access-control-allow-origin: http://radiobrasilitalia.com.br
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement_Module_AudienceManagement.min.js
200 OK 8.8 kB URL HTTP/2 assets.adobedtm.com/extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement_Module_AudienceManagement.min.js
IP
File type exported SGML document, ASCII text, with very long lines (24962)
Hash 91ef149792868e190108180b3feddba5
b33e6929142cdd60a29502586d7df805350ae0da
5ca4b61cfd7227130c941ce5d55efeb0daf98328421268545f3ae1f47bcaecaf
GET /extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement_Module_AudienceManagement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "c8afb92bc0d997ba5b673367e69b9ff1:1597270193.156081"
last-modified: Wed, 12 Aug 2020 22:09:53 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 8762
expires: Tue, 27 Sep 2022 21:53:13 GMT
date: Tue, 27 Sep 2022 20:53:13 GMT
cache-control: no-cache
access-control-allow-origin: http://radiobrasilitalia.com.br
timing-allow-origin: *
X-Firefox-Spdy: h2
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/a_002.js
200 OK 471 B URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/a_002.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash c1c6c70e54a5565e31176d58e5568c87
ab456e693842750b5a0dfb2c7330095f98672957
ce2698f227d17a5785a853ef8e6adc2b9caaa4b44fbcec72492166ff059ee572
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/a_002.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992436514
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/2.jpg
200 OK 9.0 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/2.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 195x195, components 3\012- data
Hash d04e66bb52fe4edc15f4eec6411e4377
6dd41912a7e09fa8e1444146d2551cb3232425f7
6c9ba31d77cab87bbbdf5d6c3936bcc9361b0adba9ac321cc6e5fe7ad2f18e83
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/2.jpg HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:13 GMT
Server: Apache
Last-Modified: Tue, 23 Nov 2021 02:21:28 GMT
Accept-Ranges: bytes
Content-Length: 8956
Vary: User-Agent
X-Generated: t=1664311993046210
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: image/jpeg
dpm.demdex.net/id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=AA7A3BC75245B3BC0A490D4D%40AdobeOrg&d_nsid=0&ts=1664311990749
200 OK 1.3 kB URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=AA7A3BC75245B3BC0A490D4D%40AdobeOrg&d_nsid=0&ts=1664311990749
IP
File type JSON data\012- , ASCII text, with very long lines (4008), with no line terminators
Hash c8a271348b81c72a8c2618324272e5ac
9fd102197a83f384760e8006365f29298c5b8359
5f0de597fd6cc1d9b3f35db36d827cc0a55700403efd0da1ff431ecb7d7c3a3e
GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=AA7A3BC75245B3BC0A490D4D%40AdobeOrg&d_nsid=0&ts=1664311990749 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: http://radiobrasilitalia.com.br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://radiobrasilitalia.com.br
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v043-096918f46.edge-irl1.demdex.com 2 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=37935358545616094961989701547949926912; Max-Age=15552000; Expires=Sun, 26 Mar 2023 20:53:13 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: iCwIE9R8S20=
Content-Length: 1336
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 20:53:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 20:53:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
200 OK 128 kB URL HTTP/2 fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Size 128 kB (128352 bytes)
Hash 53436aca8627a49f4deaaa44dc9e3c05
0bc0c675480d94ec7e8609dda6227f88c5d08d2c
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://radiobrasilitalia.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 20:36:08 GMT
expires: Fri, 22 Sep 2023 20:36:08 GMT
cache-control: public, max-age=31536000
age: 433025
last-modified: Thu, 25 Aug 2022 00:26:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/materialiconsoutlined/v108/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff2
200 OK 155 kB URL HTTP/2 fonts.gstatic.com/s/materialiconsoutlined/v108/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 155276, version 1.0\012- data
Size 155 kB (155276 bytes)
Hash 0ba49c096a77b67734434cebcaf2e14d
2f9e28ab559782402f27332633c843c40209d95a
35dca8a7145a17c8d1306f25a3ca091578e15396f0b22d61eb8e73262ac75577
GET /s/materialiconsoutlined/v108/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://radiobrasilitalia.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 155276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 04:36:57 GMT
expires: Fri, 22 Sep 2023 04:36:57 GMT
cache-control: public, max-age=31536000
age: 490576
last-modified: Thu, 11 Aug 2022 01:57:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/storage.html
200 OK 17 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/storage.html
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32207), with CRLF line terminators
Hash cf2dc8e730436a227dc80ac4d2940472
0f386462c0851d96a6be6bd8a96407a448362d0b
88fd9d9a067b1625c5ca3ead51389c3534e523c2ee11595de0b32be1532598a4
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/storage.html HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851; at_check=true
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:13 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:34 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311993362193
Content-Length: 16737
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/html
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 20:53:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
suntrust.tt.omtrdc.net/rest/v1/delivery?client=suntrust&sessionId=e383773ae3034b068a0e5850ed401018&version=2.4.1
200 OK 300 B URL HTTP/1.1 suntrust.tt.omtrdc.net/rest/v1/delivery?client=suntrust&sessionId=e383773ae3034b068a0e5850ed401018&version=2.4.1
IP
File type JSON data\012- , ASCII text, with very long lines (351), with no line terminators
Hash 86951b8fb02a845766bef2d81d0e1b93
1739abcda21bd5dd4b0c4a2061d72b4a3eab0e62
9c22c5747c82e522973de52aa44390ffacc4db9140cc2c7eb281ae14b2dd1b07
POST /rest/v1/delivery?client=suntrust&sessionId=e383773ae3034b068a0e5850ed401018&version=2.4.1 HTTP/1.1
Host: suntrust.tt.omtrdc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain
Content-Length: 893
Origin: http://radiobrasilitalia.com.br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
HTTP/1.1 200 OK
date: Tue, 27 Sep 2022 20:53:13 GMT
content-type: application/json;charset=UTF-8
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
access-control-allow-origin: http://radiobrasilitalia.com.br
access-control-allow-credentials: true
x-request-id: e2914281-9722-4ebd-9955-2e1381cc3692
timing-allow-origin: *
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List
content-encoding: gzip
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
server: jag
transfer-encoding: chunked
suntrustbanksinc.demdex.net/dest5.html?d_nsid=0
200 OK 2.8 kB URL HTTP/1.1 suntrustbanksinc.demdex.net/dest5.html?d_nsid=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Hash ccbdcb1e84c241950763ec4cd516cdfc
55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
GET /dest5.html?d_nsid=0 HTTP/1.1
Host: suntrustbanksinc.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: text/html;charset=UTF-8
date: Tue, 27 Sep 2022 20:53:13 GMT
DCS: dcs-prod-irl1-1-v043-042e880ee.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Mon, 26 Sep 2022 13:36:37 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: 6EGyqOWgSWQ=
Content-Length: 2791
Connection: keep-alive
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Bold-Web.8b7c8b0da5f5c9a40257.woff2
404 Not Found 33 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Bold-Web.8b7c8b0da5f5c9a40257.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9261)
Hash 7caed02dc11cd64e1105c75b0e47a647
40ccba8c84819d20aaff826f8b073fccf7f8e042
43e6a599cf865f842c08cf590069946a63bb1738d3eeae816ddda51b91e9912b
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/Graphik-Bold-Web.8b7c8b0da5f5c9a40257.woff2 HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/styles.css
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851; at_check=true
HTTP/1.1 404 Not Found
Date: Tue, 27 Sep 2022 20:53:13 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://radiobrasilitalia.com.br/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding,User-Agent
X-Generated: t=1664311993394517
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/assets/img/icons/tru-core-icon-sprite.svg
404 Not Found 8.4 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/assets/img/icons/tru-core-icon-sprite.svg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9261)
Hash 0bd301f939eb5edae8ec48b6c2cf4417
cc0aa0f857e41f68b5f6017eab60b604313fff56
a97224e4f5a7b78b7a053bf7bd969fab4e56e6fca9604d4488713f69e2f3bfd6
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/assets/img/icons/tru-core-icon-sprite.svg HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851; at_check=true
HTTP/1.1 404 Not Found
Date: Tue, 27 Sep 2022 20:53:13 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://radiobrasilitalia.com.br/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311993375802
Content-Length: 8377
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Medium-Web.eea98049c3b65bb9c9b8.woff2
404 Not Found 33 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Medium-Web.eea98049c3b65bb9c9b8.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9261)
Hash c6b95bd02fa4bd7beb2b3bd470600f06
6d60b3cb92d94b253160dc20e5f20325b64f4389
cc07770b755775a0d514134dff319fd18aaed3512bbd287c41315da7b87fd25c
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/Graphik-Medium-Web.eea98049c3b65bb9c9b8.woff2 HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/styles.css
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851; at_check=true
HTTP/1.1 404 Not Found
Date: Tue, 27 Sep 2022 20:53:13 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://radiobrasilitalia.com.br/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding,User-Agent
X-Generated: t=1664311993391023
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Light-Web.ce61f0c6c0ebb04bd08a.woff2
404 Not Found 33 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Light-Web.ce61f0c6c0ebb04bd08a.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9261)
Hash 7bb033808e2fc27828b71339fffc6a6d
ed1d3d03840df8f317669f765e932a998d002724
e9f3a3e311c293c8d0384ed08bbc50ec916aa178699a909afde3e4bf91f454b9
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/Graphik-Light-Web.ce61f0c6c0ebb04bd08a.woff2 HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/styles.css
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851; at_check=true
HTTP/1.1 404 Not Found
Date: Tue, 27 Sep 2022 20:53:13 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://radiobrasilitalia.com.br/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding,User-Agent
X-Generated: t=1664311993499325
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Regular-Web.964ebe1d5f67a101f88c.woff2
404 Not Found 33 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Regular-Web.964ebe1d5f67a101f88c.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9261)
Hash b927c6e5202f3468fde7b9017cd8f74a
7edbae40e7bf13ca7de12a2e6cafe51348d52363
6e5bbb456d45c0f66dbe973ef47570fc33bd2883a313141a38740497349bd869
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/Graphik-Regular-Web.964ebe1d5f67a101f88c.woff2 HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/styles.css
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851; at_check=true
HTTP/1.1 404 Not Found
Date: Tue, 27 Sep 2022 20:53:13 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://radiobrasilitalia.com.br/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding,User-Agent
X-Generated: t=1664311993392426
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/undefined//accdn.lpsnmedia.net/api/account/28229424/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
301 Moved Permanently 0 B URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/undefined//accdn.lpsnmedia.net/api/account/28229424/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/upgrade/dashboard/undefined//accdn.lpsnmedia.net/api/account/28229424/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851; at_check=true
HTTP/1.1 301 Moved Permanently
Date: Tue, 27 Sep 2022 20:53:13 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Location: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/undefined/accdn.lpsnmedia.net/api/account/28229424/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
Vary: User-Agent
X-Generated: t=1664311993875758
Content-Length: 0
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/undefined//accdn.lpsnmedia.net/api/account/28229424/configuration/setting/accountproperties/?cb=lpCb95934x93423
301 Moved Permanently 0 B URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/undefined//accdn.lpsnmedia.net/api/account/28229424/configuration/setting/accountproperties/?cb=lpCb95934x93423
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/upgrade/dashboard/undefined//accdn.lpsnmedia.net/api/account/28229424/configuration/setting/accountproperties/?cb=lpCb95934x93423 HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851; at_check=true
HTTP/1.1 301 Moved Permanently
Date: Tue, 27 Sep 2022 20:53:13 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Location: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/undefined/accdn.lpsnmedia.net/api/account/28229424/configuration/setting/accountproperties/?cb=lpCb95934x93423
Vary: User-Agent
X-Generated: t=1664311993875715
Content-Length: 0
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4601
Expires: Tue, 27 Sep 2022 22:09:55 GMT
Date: Tue, 27 Sep 2022 20:53:14 GMT
Connection: keep-alive
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Bold-Web.c1c9a1709295b7678669.woff
404 Not Found 33 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Bold-Web.c1c9a1709295b7678669.woff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9261)
Hash 0b1168333740fbc292c5d47b764d8939
e46a76b4a694819df21d9bee296f6c2254104081
2581de9e2257475baa977554139285f96b69e3301270f80491bd8e7566ed6492
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/Graphik-Bold-Web.c1c9a1709295b7678669.woff HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/styles.css
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CMCMID%7C45426919089059094311167397673509278127%7CMCAAMLH-1664916791%7C6%7CMCAAMB-1664916791%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1664319191s%7CNONE%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851|PC#e383773ae3034b068a0e5850ed401018.37_0#1727556792; at_check=true; AMCVS_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=1
HTTP/1.1 404 Not Found
Date: Tue, 27 Sep 2022 20:53:13 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://radiobrasilitalia.com.br/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding,User-Agent
X-Generated: t=1664311993878934
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4601
Expires: Tue, 27 Sep 2022 22:09:55 GMT
Date: Tue, 27 Sep 2022 20:53:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4601
Expires: Tue, 27 Sep 2022 22:09:55 GMT
Date: Tue, 27 Sep 2022 20:53:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4601
Expires: Tue, 27 Sep 2022 22:09:55 GMT
Date: Tue, 27 Sep 2022 20:53:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4601
Expires: Tue, 27 Sep 2022 22:09:55 GMT
Date: Tue, 27 Sep 2022 20:53:14 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 46e31aa06b8e86a9a5f9ba1cc3feca08
75df3341e30281fcbf78c7074980356fdf0be8e2
d1fd4f81b7e0f43de960f0ee024d9e87bcb395f032a4ab0360e3829d1ec8a42b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5319
x-amzn-requestid: d4c13fa8-eb03-4abf-9516-b74eac712b87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFkreHL5IAMFcOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b16-487923453bd27d6a744b5a31;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:35:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: gGfaq_dx7NIHH43-iNn0Ah61HRLT8H3NxPGVoDvkKgBgy8zJWYwRuw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:49:18 GMT
age: 83036
etag: "75df3341e30281fcbf78c7074980356fdf0be8e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14218a43c5e5bbce546735a780c8ccce
61676358cdbb2373bc644e66f8a84fbc8cc5daf6
905b1c30a2273aef69904f2eb1451c756fc1fdba02e86ea5c957629dd056aeda
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6390
x-amzn-requestid: b2681ff8-ab83-41e6-adef-3e6772c93c3f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGFJ6Gc_oAMF44g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63324f0c-3dbf9f4e2047567b5abdbe74;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 01:17:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8JXEBo_L_xKuKdeoOXEJ6FO7ZVsZVQzUmQFe7fYcxaHRQNEq1HWp6w==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:25:52 GMT
age: 70042
etag: "61676358cdbb2373bc644e66f8a84fbc8cc5daf6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash deb8d1e3b6d7fbc8c8ba478269621676
84f5a4c8b38acde814bc790e5b514347718d5bb9
ed14fa766f0708b4166e83b61f160db5671af430917b7c67184bf18d9208742b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9163
x-amzn-requestid: 8ccd9b1f-bef9-4591-be32-e6dd98f4ee78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlKpEZrIAMFS1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321bdd-4a40b9c8281b64c725fec0f1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:38:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Lf6qqokEw32egp3ofmJGtUTAt3RD2f9rVq5gskbhrk_VFGweeo0oCQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:49:18 GMT
age: 83036
etag: "84f5a4c8b38acde814bc790e5b514347718d5bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5274e770cb5a704916c8965659709f4a
1a26007f761e439db575fb80fb403031260aecf4
e36e8be75c92feb9b416a46c5918356d8f9694894a799b7c10de21034d33d5ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7455
x-amzn-requestid: 0887cd56-f324-46cf-a086-709e1c66f354
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGBTdHmhoAMFvIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633248e2-42391706084f335228fe3994;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 00:50:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: vx-yM_jeJvOaa1UizK5OoDJFkvKnajg2ezLF2l2qnN_OhdTE6I4taQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:05:55 GMT
etag: "1a26007f761e439db575fb80fb403031260aecf4"
content-type: image/jpeg
age: 71239
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Medium-Web.b7af4207459a405b99aa.woff
404 Not Found 33 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Medium-Web.b7af4207459a405b99aa.woff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9261)
Hash 2c25ad7cef68f895e4e28b018420ae88
6d1042a465c1ffb7df7984d4ac8165417b149cb3
102a263267f8f76d795f23bd7da0abdf639f6f8112c05c71c14334646c1366be
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/Graphik-Medium-Web.b7af4207459a405b99aa.woff HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/styles.css
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CMCMID%7C45426919089059094311167397673509278127%7CMCAAMLH-1664916791%7C6%7CMCAAMB-1664916791%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1664319191s%7CNONE%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851|PC#e383773ae3034b068a0e5850ed401018.37_0#1727556792; at_check=true; AMCVS_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=1
HTTP/1.1 404 Not Found
Date: Tue, 27 Sep 2022 20:53:13 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://radiobrasilitalia.com.br/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding,User-Agent
X-Generated: t=1664311993894385
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F171029d0-40d4-47b3-8936-8ba3b16b3212.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F171029d0-40d4-47b3-8936-8ba3b16b3212.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 347dca206e13a3b13953f0ab398310b4
be60bbc96c832ae385cc9ae5828bd32703011b21
f6da888a54a0c6c73466f2c2a72dd875514a39d81b760a6b0116b4dd56ef31dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F171029d0-40d4-47b3-8936-8ba3b16b3212.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10211
x-amzn-requestid: 3ea4ac84-2465-4bd1-8ade-863de3c9576e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YbfSuGoQoAMF9oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632145aa-7843b82728ead9a053c689d1;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MMrek5LO9ukZjB6VV-5McuE_maDzwTOihucz0kwxuaTJMNOpTchoJA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:52:00 GMT
age: 82874
etag: "be60bbc96c832ae385cc9ae5828bd32703011b21"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a90590f26bae9ad9e95ffdfbfb7dd21d
cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3
33fe3394213e01d11c3e005cb5a678ba74511704d4132fc2bd9f7ad4e1b7dbfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10318
x-amzn-requestid: 6a205445-8a9e-4f25-b144-ba6e6934d383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSlhFNAIAMFmBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330caef-61ecbf9154cd56131b940ac0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qP5-TglQAoTGc78-rIK27mKRTS_WthN0OpiiMqSF-y2rmWxVOyfNVw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:02:24 GMT
age: 85850
etag: "cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Light-Web.413802a3486a5a2cf881.woff
404 Not Found 33 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Light-Web.413802a3486a5a2cf881.woff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9261)
Hash d4ba028190a3951fd6b7fc62c7e98ce9
2943a2b115ee732d2c274f2ed130c4050dda5ea8
b5dd5efcac137ae41042da8bdad03e657b2d3b0672ec9bb1d9a850073bff3f28
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/Graphik-Light-Web.413802a3486a5a2cf881.woff HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/styles.css
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CMCMID%7C45426919089059094311167397673509278127%7CMCAAMLH-1664916791%7C6%7CMCAAMB-1664916791%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1664319191s%7CNONE%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851|PC#e383773ae3034b068a0e5850ed401018.37_0#1727556792; at_check=true; AMCVS_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=1
HTTP/1.1 404 Not Found
Date: Tue, 27 Sep 2022 20:53:13 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://radiobrasilitalia.com.br/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding,User-Agent
X-Generated: t=1664311993979510
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a96941187ccba5e89735494fd66b8bd9
a15aec61ad8f8dfac54a3af3910732241eb480cc
5c91f80e50d694403a5df5339577b1a2dc1697efb137394ce437b0c5e2376c09
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 20:53:14 GMT
Last-Modified: Tue, 27 Sep 2022 19:03:17 GMT
Server: ECS (nyb/1D27)
X-Cache: Miss from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: MRJxNXS9EQ7Pd8toeBts13bEW4oithhB4XnmCuT6sV2XfWImyekySQ==
Age: 6597
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Regular-Web.f8ec249a45d5a0313b93.woff
404 Not Found 33 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/Graphik-Regular-Web.f8ec249a45d5a0313b93.woff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9261)
Hash 9b750eb50a30c28b40cf7c596af08dcb
284e2b1beb2bce20429b306cf63d4c89a76a6be9
7c9eacd78fbca4e63d33dc3ab66c7099cc6f53b99eba4477b4d2ddcab9554a32
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/Graphik-Regular-Web.f8ec249a45d5a0313b93.woff HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/styles.css
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CMCMID%7C45426919089059094311167397673509278127%7CMCAAMLH-1664916791%7C6%7CMCAAMB-1664916791%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1664319191s%7CNONE%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851|PC#e383773ae3034b068a0e5850ed401018.37_0#1727556792; at_check=true; AMCVS_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=1
HTTP/1.1 404 Not Found
Date: Tue, 27 Sep 2022 20:53:14 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://radiobrasilitalia.com.br/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding,User-Agent
X-Generated: t=1664311994162680
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/undefined/accdn.lpsnmedia.net/api/account/28229424/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
404 Not Found 8.5 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/undefined/accdn.lpsnmedia.net/api/account/28229424/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9261)
Hash ea9b8c822ee1b65fd5048fa2b91399f4
5792437593c0684f144712c7a1e80aec88dfd259
afb4906a67bd05e1dadace092810df40a7a04c240a554be3b1bfc234c9bc784c
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/upgrade/dashboard/undefined/accdn.lpsnmedia.net/api/account/28229424/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
Connection: keep-alive
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CMCMID%7C45426919089059094311167397673509278127%7CMCAAMLH-1664916791%7C6%7CMCAAMB-1664916791%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1664319191s%7CNONE%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851|PC#e383773ae3034b068a0e5850ed401018.37_0#1727556792; at_check=true; AMCVS_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=1
HTTP/1.1 404 Not Found
Date: Tue, 27 Sep 2022 20:53:14 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://radiobrasilitalia.com.br/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311994195693
Content-Length: 8477
Keep-Alive: timeout=5, max=65
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
pixel.everesttech.net/1/gr?url=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%3Fcm_dsp_id%3D71%26external_user_id%3D__EFGSURFER__.__EFGCK__
302 Found 457 B URL HTTP/1.1 pixel.everesttech.net/1/gr?url=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%3Fcm_dsp_id%3D71%26external_user_id%3D__EFGSURFER__.__EFGCK__
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (323)
Hash ce93b4a4d428c02a6ef1a1eeceb4bc48
682ab46514f674f3794b1dd2c881ff03e79f30ac
35f250128507e4de8c22dc182c61ec6da03abaf7d0f2f3f25526e5190d33823d
GET /1/gr?url=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%3Fcm_dsp_id%3D71%26external_user_id%3D__EFGSURFER__.__EFGCK__ HTTP/1.1
Host: pixel.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://suntrustbanksinc.demdex.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Tue, 27 Sep 2022 20:53:14 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 457
Connection: keep-alive
Server: Apache
Location: https://cm.g.doubleclick.net/pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&google_hm=WXpOaXVnQUFBYXMzWnhuYg&url=/1/gr%3furl=https%253A%252F%252Fdsum-sec.casalemedia.com%252Frum%253Fcm_dsp_id%253D71%2526external_user_id%253D__EFGSURFER__.__EFGCK__
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/undefined/accdn.lpsnmedia.net/api/account/28229424/configuration/setting/accountproperties/?cb=lpCb95934x93423
404 Not Found 8.5 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/undefined/accdn.lpsnmedia.net/api/account/28229424/configuration/setting/accountproperties/?cb=lpCb95934x93423
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9261)
Hash 9109cd03f4711604feec879b80f771c0
10d85a4468999855a0c104e5c36f26945824033d
caf461c02b68a48d243b4ff51c0a5e91dda79f730a843aaeaae545c49a839bca
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/undefined/accdn.lpsnmedia.net/api/account/28229424/configuration/setting/accountproperties/?cb=lpCb95934x93423 HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
Connection: keep-alive
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CMCMID%7C45426919089059094311167397673509278127%7CMCAAMLH-1664916791%7C6%7CMCAAMB-1664916791%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1664319191s%7CNONE%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851|PC#e383773ae3034b068a0e5850ed401018.37_0#1727556792; at_check=true; AMCVS_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=1
HTTP/1.1 404 Not Found
Date: Tue, 27 Sep 2022 20:53:14 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://radiobrasilitalia.com.br/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311994227288
Content-Length: 8458
Keep-Alive: timeout=5, max=65
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ab8b69fade235ccf1a15d2cac6dd95e
37c426c0e6940920c4478855c6bb610731edd316
025fc814f74bed6fcfc2a4c25b670c1d538d06c5ce07af13d3f9f8354ca34604
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 20:53:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cm.g.doubleclick.net/pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&google_hm=WXpOaXVnQUFBYXMzWnhuYg&url=/1/gr%3furl=https%253A%252F%252Fdsum-sec.casalemedia.com%252Frum%253Fcm_dsp_id%253D71%2526external_user_id%253D__EFGSURFER__.__EFGCK__
302 Found 487 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&google_hm=WXpOaXVnQUFBYXMzWnhuYg&url=/1/gr%3furl=https%253A%252F%252Fdsum-sec.casalemedia.com%252Frum%253Fcm_dsp_id%253D71%2526external_user_id%253D__EFGSURFER__.__EFGCK__
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (310), with CRLF, LF line terminators
Hash 88b64455e5e88ae06765432eef40b652
623c4389189ce4c71ed64107dce14e8a4c64317c
ecc5262ecd282f0b8466b56f229454237226d53a32ac84f29869fc875e7affe9
GET /pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&google_hm=WXpOaXVnQUFBYXMzWnhuYg&url=/1/gr%3furl=https%253A%252F%252Fdsum-sec.casalemedia.com%252Frum%253Fcm_dsp_id%253D71%2526external_user_id%253D__EFGSURFER__.__EFGCK__ HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://suntrustbanksinc.demdex.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=everest&google_cm=&google_sc=&ev_rs=1&google_hm=WXpOaXVnQUFBYXMzWnhuYg&url=/1/gr%3Furl=https%253A%252F%252Fdsum-sec.casalemedia.com%252Frum%253Fcm_dsp_id%253D71%2526external_user_id%253D__EFGSURFER__.__EFGCK__&google_tc=
date: Tue, 27 Sep 2022 20:53:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 487
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 27-Sep-2022 21:08:14 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=everest&google_cm=&google_sc=&ev_rs=1&google_hm=WXpOaXVnQUFBYXMzWnhuYg&url=/1/gr%3Furl=https%253A%252F%252Fdsum-sec.casalemedia.com%252Frum%253Fcm_dsp_id%253D71%2526external_user_id%253D__EFGSURFER__.__EFGCK__&google_tc=
302 Found 413 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=everest&google_cm=&google_sc=&ev_rs=1&google_hm=WXpOaXVnQUFBYXMzWnhuYg&url=/1/gr%3Furl=https%253A%252F%252Fdsum-sec.casalemedia.com%252Frum%253Fcm_dsp_id%253D71%2526external_user_id%253D__EFGSURFER__.__EFGCK__&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 6dd125f3ddfa86457dba90be798b2a56
58cc4409345297923bb2ea2bdb4e5b68ebd2a17f
ed387769b578200fcc090c05c8cbdb14ee5ca205928bbc9b7798c848c8a5ce87
GET /pixel?google_nid=everest&google_cm=&google_sc=&ev_rs=1&google_hm=WXpOaXVnQUFBYXMzWnhuYg&url=/1/gr%3Furl=https%253A%252F%252Fdsum-sec.casalemedia.com%252Frum%253Fcm_dsp_id%253D71%2526external_user_id%253D__EFGSURFER__.__EFGCK__&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://suntrustbanksinc.demdex.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://cm.everesttech.net/cm/ax?cookieid=&ev_rs=1&url=/1/gr%3Furl=https%253A%252F%252Fdsum-sec.casalemedia.com%252Frum%253Fcm_dsp_id%253D71%2526external_user_id%253D__EFGSURFER__.__EFGCK__&google_error=3
date: Tue, 27 Sep 2022 20:53:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 413
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ab8b69fade235ccf1a15d2cac6dd95e
37c426c0e6940920c4478855c6bb610731edd316
025fc814f74bed6fcfc2a4c25b670c1d538d06c5ce07af13d3f9f8354ca34604
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 20:53:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cm.everesttech.net/cm/ax?cookieid=&ev_rs=1&url=/1/gr%3Furl=https%253A%252F%252Fdsum-sec.casalemedia.com%252Frum%253Fcm_dsp_id%253D71%2526external_user_id%253D__EFGSURFER__.__EFGCK__&google_error=3
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/ax?cookieid=&ev_rs=1&url=/1/gr%3Furl=https%253A%252F%252Fdsum-sec.casalemedia.com%252Frum%253Fcm_dsp_id%253D71%2526external_user_id%253D__EFGSURFER__.__EFGCK__&google_error=3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/ax?cookieid=&ev_rs=1&url=/1/gr%3Furl=https%253A%252F%252Fdsum-sec.casalemedia.com%252Frum%253Fcm_dsp_id%253D71%2526external_user_id%253D__EFGSURFER__.__EFGCK__&google_error=3 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://suntrustbanksinc.demdex.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Tue, 27 Sep 2022 20:53:14 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~YzNiugAAAGzBaAN6; Domain=.everesttech.net; Expires=Wed, 27-Sep-2023 20:53:14 GMT; Path=/
everest_session_v2=YzNiugAAAGzBaQN6; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://cm.g.doubleclick.net/pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1x1&google_hm=WXpOaXVnQUFBR3pCYUFONg
Server: AMO-cookiemap/1.1
cm.everesttech.net/cm/ax?cookieid=&ev_rs=1&url=/1x1&google_error=3
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/ax?cookieid=&ev_rs=1&url=/1x1&google_error=3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/ax?cookieid=&ev_rs=1&url=/1x1&google_error=3 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://suntrustbanksinc.demdex.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Tue, 27 Sep 2022 20:53:14 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~YzNiugAAAK_nngN-; Domain=.everesttech.net; Expires=Wed, 27-Sep-2023 20:53:14 GMT; Path=/
everest_session_v2="YzNiugAAAK@nnwN-"; Version=1; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://cm.g.doubleclick.net/pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1x1&google_hm=WXpOaXVnQUFBS19ubmdOLQ
Server: AMO-cookiemap/1.1
cm.everesttech.net/cm/ax?cookieid=&ev_rs=1&url=/1x1&google_error=3
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/ax?cookieid=&ev_rs=1&url=/1x1&google_error=3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/ax?cookieid=&ev_rs=1&url=/1x1&google_error=3 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://suntrustbanksinc.demdex.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Tue, 27 Sep 2022 20:53:14 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~YzNiugAAAH5tFAOY; Domain=.everesttech.net; Expires=Wed, 27-Sep-2023 20:53:14 GMT; Path=/
everest_session_v2=YzNiugAAAH5tFQOY; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://cm.g.doubleclick.net/pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1x1&google_hm=WXpOaXVnQUFBSDV0RkFPWQ
Server: AMO-cookiemap/1.1
cm.everesttech.net/cm/ax?cookieid=&ev_rs=1&url=/1x1&google_error=3
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/ax?cookieid=&ev_rs=1&url=/1x1&google_error=3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/ax?cookieid=&ev_rs=1&url=/1x1&google_error=3 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://suntrustbanksinc.demdex.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Tue, 27 Sep 2022 20:53:15 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~YzNiuwAAADfp0wNx; Domain=.everesttech.net; Expires=Wed, 27-Sep-2023 20:53:15 GMT; Path=/
everest_session_v2=YzNiuwAAADfp1ANx; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://cm.g.doubleclick.net/pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1x1&google_hm=WXpOaXV3QUFBRGZwMHdOeA
Server: AMO-cookiemap/1.1
cm.everesttech.net/cm/ax?cookieid=&ev_rs=1&url=/1x1&google_error=3
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/ax?cookieid=&ev_rs=1&url=/1x1&google_error=3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/ax?cookieid=&ev_rs=1&url=/1x1&google_error=3 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://suntrustbanksinc.demdex.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Tue, 27 Sep 2022 20:53:15 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~YzNiuwAAAL8AwAN-; Domain=.everesttech.net; Expires=Wed, 27-Sep-2023 20:53:15 GMT; Path=/
everest_session_v2=YzNiuwAAAL8AwQN-; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://cm.g.doubleclick.net/pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1x1&google_hm=WXpOaXV3QUFBTDhBd0FOLQ
Server: AMO-cookiemap/1.1
cm.everesttech.net/cm/ax?cookieid=&ev_rs=1&url=/1x1&google_error=3
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/ax?cookieid=&ev_rs=1&url=/1x1&google_error=3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/ax?cookieid=&ev_rs=1&url=/1x1&google_error=3 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://suntrustbanksinc.demdex.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Tue, 27 Sep 2022 20:53:15 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~YzNiuwAAAElthwOY; Domain=.everesttech.net; Expires=Wed, 27-Sep-2023 20:53:15 GMT; Path=/
everest_session_v2=YzNiuwAAAEltiAOY; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://cm.g.doubleclick.net/pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1x1&google_hm=WXpOaXV3QUFBRWx0aHdPWQ
Server: AMO-cookiemap/1.1
radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/main-es2015.js
200 OK 1.1 MB URL HTTP/1.1 radiobrasilitalia.com.br/wp-content/upgrade/dashboard/info_files/main-es2015.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65536), with no line terminators
Size 1.1 MB (1056067 bytes)
Hash 907046aa9619cb93c9276e85db84c44e
8b9110db560a524bd854e80f25f3b2684ef78cc3
87821e3cf6c661ac29ce95125079d3382919ad5835a6e11e723c2cc9eb5b654a
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /wp-content/upgrade/dashboard/info_files/main-es2015.js HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:12 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 21:53:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Generated: t=1664311992804582
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
ocsp.sectigo.com/
200 OK 471 B IP
Hash 154c2c10f88a973c850907c290946b2b
ba0679fd341b9dfc6a0c7782aa580b85bb3a850f
2a095b79c01210807a1cc44178783cc73accbfa70487458c788dfa93c9f43070
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:16 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 04:31:53 GMT
Expires: Tue, 04 Oct 2022 04:31:52 GMT
Etag: "ba0679fd341b9dfc6a0c7782aa580b85bb3a850f"
Cache-Control: max-age=545315,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751720b70ddeb4f7-OSL
lpcdn.lpsnmedia.net/le_secure_storage/3.14.0.10-release_5062/storage.secure.min.js?loc=http%3A%2F%2Fradiobrasilitalia.com.br&site=28229424&force=1&env=prod&isCrossDomain=true
200 OK 15 kB URL HTTP/2 lpcdn.lpsnmedia.net/le_secure_storage/3.14.0.10-release_5062/storage.secure.min.js?loc=http%3A%2F%2Fradiobrasilitalia.com.br&site=28229424&force=1&env=prod&isCrossDomain=true
IP
File type ASCII text, with very long lines (38562), with no line terminators
Hash 2467925c0e828ddb4124224e2d5fdc32
1a73dce8e324ea43b4a647e4ea1fef5f691621bb
572f01342473d7e4c927fc91f12b011b038e086a7a68bffa09aaee63d4101ab2
GET /le_secure_storage/3.14.0.10-release_5062/storage.secure.min.js?loc=http%3A%2F%2Fradiobrasilitalia.com.br&site=28229424&force=1&env=prod&isCrossDomain=true HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:53:16 GMT
content-type: application/javascript
last-modified: Mon, 04 Oct 2021 11:55:44 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Wed, 27 Sep 2023 20:53:16 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-cache-status: MISS
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 154c2c10f88a973c850907c290946b2b
ba0679fd341b9dfc6a0c7782aa580b85bb3a850f
2a095b79c01210807a1cc44178783cc73accbfa70487458c788dfa93c9f43070
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:16 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 04:31:53 GMT
Expires: Tue, 04 Oct 2022 04:31:52 GMT
Etag: "ba0679fd341b9dfc6a0c7782aa580b85bb3a850f"
Cache-Control: max-age=545315,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751720b70d8bb521-OSL
dpm.demdex.net/ibs:dpid=411&dpuuid=YzNivAAAAI8KLwOJ
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=411&dpuuid=YzNivAAAAI8KLwOJ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=411&dpuuid=YzNivAAAAI8KLwOJ HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://radiobrasilitalia.com.br/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v043-0f9b93e0a.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YzNivAAAAI8KLwOJ
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=14995848011708033043275977351141076213; Max-Age=15552000; Expires=Sun, 26 Mar 2023 20:53:16 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: YvXRRn8KQ0I=
Content-Length: 0
Connection: keep-alive
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YzNivAAAAI8KLwOJ
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YzNivAAAAI8KLwOJ
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YzNivAAAAI8KLwOJ HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://radiobrasilitalia.com.br/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v043-0800e3d85.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: frM2CD+/Rhc=
Content-Length: 59
Connection: keep-alive
radiobrasilitalia.com.br/favicon.ico
302 Found 0 B URL HTTP/1.1 radiobrasilitalia.com.br/favicon.ico
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CMCMID%7C45426919089059094311167397673509278127%7CMCAAMLH-1664916791%7C6%7CMCAAMB-1664916791%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1664319191s%7CNONE%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851|PC#e383773ae3034b068a0e5850ed401018.37_0#1727556792; at_check=true; AMCVS_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=1
HTTP/1.1 302 Found
Date: Tue, 27 Sep 2022 20:53:16 GMT
Server: Apache
Link: <https://radiobrasilitalia.com.br/wp-json/>; rel="https://api.w.org/"
X-Redirect-By: WordPress
Location: http://radiobrasilitalia.com.br/wp-includes/images/w-logo-blue-white-bg.png
Vary: User-Agent
X-Generated: t=1664311996220296
Content-Length: 0
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
radiobrasilitalia.com.br/wp-includes/images/w-logo-blue-white-bg.png
200 OK 4.1 kB URL HTTP/1.1 radiobrasilitalia.com.br/wp-includes/images/w-logo-blue-white-bg.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 000bf649cc8f6bf27cfb04d1bcdcd3c7
d73d2f6d74ec6cdcbae07955592962e77d8ae814
6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: radiobrasilitalia.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://radiobrasilitalia.com.br/wp-content/upgrade/dashboard/em.php?cmd=
Connection: keep-alive
Cookie: AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=-1124106680%7CMCIDTS%7C19263%7CMCMID%7C45426919089059094311167397673509278127%7CMCAAMLH-1664916791%7C6%7CMCAAMB-1664916791%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1664319191s%7CNONE%7CMCSYNCSOP%7C411-19270%7CvVersion%7C5.2.0; mbox=session#e383773ae3034b068a0e5850ed401018#1664313851|PC#e383773ae3034b068a0e5850ed401018.37_0#1727556792; at_check=true; AMCVS_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=1
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:16 GMT
Server: Apache
Last-Modified: Tue, 16 Nov 2021 00:04:01 GMT
Accept-Ranges: bytes
Content-Length: 4119
Vary: User-Agent
X-Generated: t=1664311996593449
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/png
ocsp.sectigo.com/
200 OK 472 B IP
Hash fddbb5b6587ac202c0ac976031147fd8
8f1369b178af6277ffc47017d1edca30593eeeaf
516ed998ae53c6a570fe6e30832285e77588b92d13936c196260f3cf3abde8c6
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:53:16 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 24 Sep 2022 15:43:31 GMT
Expires: Sat, 01 Oct 2022 15:43:30 GMT
Etag: "8f1369b178af6277ffc47017d1edca30593eeeaf"
Cache-Control: max-age=326413,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751720bc6da6b4f7-OSL
lptag.liveperson.net/tag/tag.js?site=28600839
200 OK 7.6 kB URL HTTP/2 lptag.liveperson.net/tag/tag.js?site=28600839
IP
File type ASCII text, with very long lines (21652), with no line terminators
Hash 6b675640425ec8551a433e26a377d954
7234f02cce1ccb2a4facf2b34b9185cfcf27299d
8c9716f14d2e964be7c93d3d8c28819cb35c529fce6206a79061cda509e05bfd
GET /tag/tag.js?site=28600839 HTTP/1.1
Host: lptag.liveperson.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:53:16 GMT
content-type: application/javascript
content-length: 7567
last-modified: Thu, 03 Sep 2020 08:27:49 GMT
etag: "5f50a905-1d8f"
content-encoding: gzip
server: ws
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
cache-control: public, max-age=630
x-content-type-options: nosniff
X-Firefox-Spdy: h2
lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/surveylogicinstance.min.js?version=10.20.1.9-release_5536
200 OK 2.9 kB URL HTTP/2 lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/surveylogicinstance.min.js?version=10.20.1.9-release_5536
IP
File type ASCII text, with very long lines (8117), with no line terminators
Hash accffbddb438d130c25552cd9d91dcad
adbfa6861dd60d2f62b2892c0a5b798fb0c81ec2
ec4ff84bee3d84b5dd61f860bc34fabde0e510971adc2bef1bd2d2b7f678e175
GET /le_unified_window/10.20.1.9-release_5536/surveylogicinstance.min.js?version=10.20.1.9-release_5536 HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:53:17 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 14:50:35 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Wed, 27 Sep 2023 20:53:17 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-cache-status: HIT
X-Firefox-Spdy: h2
siteintercept.qualtrics.com/dxjsmodule/11.d0fd9af22c976b87ea77.chunk.js?Q_CLIENTVERSION=1.78.0&Q_CLIENTTYPE=web&Q_BRANDID=truistcx
200 OK 0 B URL HTTP/2 siteintercept.qualtrics.com/dxjsmodule/11.d0fd9af22c976b87ea77.chunk.js?Q_CLIENTVERSION=1.78.0&Q_CLIENTTYPE=web&Q_BRANDID=truistcx
IP
GET /dxjsmodule/11.d0fd9af22c976b87ea77.chunk.js?Q_CLIENTVERSION=1.78.0&Q_CLIENTTYPE=web&Q_BRANDID=truistcx HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:53:16 GMT
content-type: application/javascript
cf-ray: 751720bc0f20b4f3-OSL
access-control-allow-origin: *
age: 65791
cache-control: public, max-age=604800, s-maxage=604800
etag: W/"f7f2-1837ae8dda8"
last-modified: Mon, 26 Sep 2022 17:47:05 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=63474
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
siteintercept.qualtrics.com/WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_dh8D3LGsx3cVYOy&Version=0&Q_CLIENTVERSION=1.78.0&Q_CLIENTTYPE=web
200 OK 0 B URL HTTP/2 siteintercept.qualtrics.com/WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_dh8D3LGsx3cVYOy&Version=0&Q_CLIENTVERSION=1.78.0&Q_CLIENTTYPE=web
IP
POST /WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_dh8D3LGsx3cVYOy&Version=0&Q_CLIENTVERSION=1.78.0&Q_CLIENTTYPE=web HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 135
Origin: http://radiobrasilitalia.com.br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:53:17 GMT
content-type: application/json
cf-ray: 751720bc7f93b4f3-OSL
access-control-allow-origin: http://radiobrasilitalia.com.br
cache-control: no-store, no-cache, must-revalidate, max-age=0
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
trace-id: 862dbee0cfb283d5
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
accdn.lpsnmedia.net/api/account/28600839/configuration/setting/accountproperties/?cb=accountSettingsCB
200 OK 0 B URL HTTP/2 accdn.lpsnmedia.net/api/account/28600839/configuration/setting/accountproperties/?cb=accountSettingsCB
IP
GET /api/account/28600839/configuration/setting/accountproperties/?cb=accountSettingsCB HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:53:17 GMT
content-type: application/javascript
set-cookie: ADRUM_BTa=R:32|g:b81efc5e-297b-43f1-8333-3826c575b991; Max-Age=30; Expires=Tue, 27-Sep-2022 20:53:47 GMT; Path=/
ADRUM_BTa=R:32|g:b81efc5e-297b-43f1-8333-3826c575b991|n:livepersonltd_93a08561-b03e-475e-b29b-9ad4aa207daf; Max-Age=30; Expires=Tue, 27-Sep-2022 20:53:47 GMT; Path=/
SameSite=None; Max-Age=30; Expires=Tue, 27-Sep-2022 20:53:47 GMT; Path=/; Secure
ADRUM_BT1=R:32|i:2241585; Max-Age=30; Expires=Tue, 27-Sep-2022 20:53:47 GMT; Path=/
ADRUM_BT1=R:32|i:2241585|e:11; Max-Age=30; Expires=Tue, 27-Sep-2022 20:53:47 GMT; Path=/
vary: Accept
expires: Tue, 27 Sep 2022 20:54:17 GMT
x-envoy-upstream-service-time: 1
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: EXPIRED
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
lpcdn.lpsnmedia.net/le_secure_storage/3.14.0.10-release_5062/storage.secure.min.html?loc=http%3A%2F%2Fradiobrasilitalia.com.br&site=28229424&env=prod&isCrossDomain=true
200 OK 0 B URL HTTP/2 lpcdn.lpsnmedia.net/le_secure_storage/3.14.0.10-release_5062/storage.secure.min.html?loc=http%3A%2F%2Fradiobrasilitalia.com.br&site=28229424&env=prod&isCrossDomain=true
IP
GET /le_secure_storage/3.14.0.10-release_5062/storage.secure.min.html?loc=http%3A%2F%2Fradiobrasilitalia.com.br&site=28229424&env=prod&isCrossDomain=true HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:53:16 GMT
content-type: text/html
last-modified: Mon, 04 Oct 2021 11:55:44 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Wed, 27 Sep 2023 20:53:16 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-cache-status: MISS
X-Firefox-Spdy: h2
siteintercept.qualtrics.com/WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_dh8D3LGsx3cVYOy&Q_CLIENTVERSION=1.62.0&Q_CLIENTTYPE=web
200 OK 0 B URL HTTP/2 siteintercept.qualtrics.com/WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_dh8D3LGsx3cVYOy&Q_CLIENTVERSION=1.62.0&Q_CLIENTTYPE=web
IP
POST /WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_dh8D3LGsx3cVYOy&Q_CLIENTVERSION=1.62.0&Q_CLIENTTYPE=web HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 96
Origin: http://radiobrasilitalia.com.br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:53:13 GMT
content-type: application/json
cf-ray: 751720a65880b4f3-OSL
access-control-allow-origin: http://radiobrasilitalia.com.br
cache-control: no-store, no-cache, must-revalidate, max-age=0
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
trace-id: eadc9dc252053d95
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
accdn.lpsnmedia.net/api/account/28229424/configuration/domainprotection/refererrestrictions?cb=lpCb41115x58637
200 OK 0 B URL HTTP/2 accdn.lpsnmedia.net/api/account/28229424/configuration/domainprotection/refererrestrictions?cb=lpCb41115x58637
IP
GET /api/account/28229424/configuration/domainprotection/refererrestrictions?cb=lpCb41115x58637 HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lpcdn.lpsnmedia.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:53:16 GMT
content-type: application/javascript
set-cookie: ADRUM_BTa=R:28|g:245d37f1-67c6-4c37-a25b-c9bdf088bbbe; Max-Age=30; Expires=Tue, 27-Sep-2022 20:53:46 GMT; Path=/
ADRUM_BTa=R:28|g:245d37f1-67c6-4c37-a25b-c9bdf088bbbe|n:livepersonltd_93a08561-b03e-475e-b29b-9ad4aa207daf; Max-Age=30; Expires=Tue, 27-Sep-2022 20:53:46 GMT; Path=/
SameSite=None; Max-Age=30; Expires=Tue, 27-Sep-2022 20:53:46 GMT; Path=/; Secure
ADRUM_BT1=R:28|i:2241585; Max-Age=30; Expires=Tue, 27-Sep-2022 20:53:46 GMT; Path=/
ADRUM_BT1=R:28|i:2241585|e:9; Max-Age=30; Expires=Tue, 27-Sep-2022 20:53:46 GMT; Path=/
cache-control: no-store
x-envoy-upstream-service-time: 95
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: MISS
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/UMSClientAPI.min.js?version=10.20.1.9-release_5536
200 OK 0 B URL HTTP/2 lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/UMSClientAPI.min.js?version=10.20.1.9-release_5536
IP
GET /le_unified_window/10.20.1.9-release_5536/UMSClientAPI.min.js?version=10.20.1.9-release_5536 HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:53:17 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 14:50:34 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Wed, 27 Sep 2023 20:53:17 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-cache-status: HIT
X-Firefox-Spdy: h2
lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/lpChatV3.min.js?version=10.20.1.9-release_5536
200 OK 0 B URL HTTP/2 lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/lpChatV3.min.js?version=10.20.1.9-release_5536
IP
GET /le_unified_window/10.20.1.9-release_5536/lpChatV3.min.js?version=10.20.1.9-release_5536 HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:53:17 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 14:50:35 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Wed, 27 Sep 2023 20:53:17 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-cache-status: HIT
X-Firefox-Spdy: h2
zndh8d3lgsx3cvyoy-truistcx.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_dh8D3LGsx3cVYOy&Q_VERSION=0
200 OK 0 B URL HTTP/2 zndh8d3lgsx3cvyoy-truistcx.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_dh8D3LGsx3cVYOy&Q_VERSION=0
IP
GET /SIE/?Q_ZID=ZN_dh8D3LGsx3cVYOy&Q_VERSION=0 HTTP/1.1
Host: zndh8d3lgsx3cvyoy-truistcx.siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:53:16 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 751720bbce8ab4f3-OSL
access-control-allow-origin: *
age: 18918
cache-control: public, max-age=3600, s-maxage=604800
etag: W/"2136-6v4bexIh1V2nurakFglEkPC/nco"
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=8502
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
lptag.liveperson.net/lptag/api/account/28600839/configuration/applications/taglets/.jsonp?v=2.0&df=0&b=3
200 OK 0 B URL HTTP/2 lptag.liveperson.net/lptag/api/account/28600839/configuration/applications/taglets/.jsonp?v=2.0&df=0&b=3
IP
GET /lptag/api/account/28600839/configuration/applications/taglets/.jsonp?v=2.0&df=0&b=3 HTTP/1.1
Host: lptag.liveperson.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:53:17 GMT
content-type: application/x-javascript
cache-control: public, max-age=630
server: ws
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: MISS
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/ui-framework.js?version=10.20.1.9-release_5536
200 OK 0 B URL HTTP/2 lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/ui-framework.js?version=10.20.1.9-release_5536
IP
GET /le_unified_window/10.20.1.9-release_5536/ui-framework.js?version=10.20.1.9-release_5536 HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://radiobrasilitalia.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:53:17 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 14:50:35 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Wed, 27 Sep 2023 20:53:17 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-cache-status: HIT
X-Firefox-Spdy: h2
162.241.60.105
23.36.76.226
93.184.220.29
104.17.209.240
15.236.176.210
52.17.180.229