| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash37284a837312d6586460a3b86bbe7bd0 6ac0847abd48eb8607597218aaa2cb2d434c012b 6a0e11bb042555d72b397ae0cc3d5e242d3a3fe04418e28ffd222decca7d16ca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A0E11BB042555D72B397AE0CC3D5E242D3A3FE04418E28FFD222DECCA7D16CA"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10940
Expires: Thu, 19 Jan 2023 05:29:58 GMT
Date: Thu, 19 Jan 2023 02:27:38 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashb36ef73c20dffb6bc10194bbd2d0dcfa a67a4023dc8b4944debaeb92f3ba0f1402c079a6 05a7a4d832cf9e593ca44efea309edcbd80734583bada15fda3e740612eff991
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "05A7A4D832CF9E593CA44EFEA309EDCBD80734583BADA15FDA3E740612EFF991"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2597
Expires: Thu, 19 Jan 2023 03:10:55 GMT
Date: Thu, 19 Jan 2023 02:27:38 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash30db107dcf4380cef05efea409c2e6a3 96e6a306fbc07299aba64e5c14e2bfca35872fa9 b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 19 Jan 2023 01:34:30 GMT
content-type: application/json
age: 3188
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7afaa97fbfa9baa1485c892eac8e114d 8c17c707c218e28ac14197ce8e5eef873207a732 59db16baacb452453dbf44fc2a24f25ab09c4dbaec3a9271fda84230d8f11925
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59DB16BAACB452453DBF44FC2A24F25AB09C4DBAEC3A9271FDA84230D8F11925"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9787
Expires: Thu, 19 Jan 2023 05:10:45 GMT
Date: Thu, 19 Jan 2023 02:27:38 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: BhjwW1aXnTdNGBE7WUcpJHFArebZ/6ihNFLJr519Y9IBHQ4uJoQrDJCBy2y3spGRaO7xz/5kCLM=
x-amz-request-id: 021DVMZC04ZA50YV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 19 Jan 2023 01:56:54 GMT
age: 1844
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 02:27:38 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat |  150.95.113.28 | 301 Moved Permanently | 169 B |
URL HTTP/1.1bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hashb51956ed2a6129f43c5d0ecc011cc5a5 c03157aff80067b6b57903d3843b9fd9e07b33ab 1ac63374d015eee8d9d875502aa63981dbeb9d86a14096de0d504763808e429b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.22.0
Date: Thu, 19 Jan 2023 02:27:38 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Keep-Alive: timeout=60
Location: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 19 Jan 2023 02:17:25 GMT
age: 613
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash79af32d8e279b4cfec147ab51cb6fcb3 d726903292bd1e08a6d9fe0719d2cd5b33dc5fe6 bfcb2d8f14d89736ac6b771f1618a8fc5e707691d60807a574fb719c8e9393ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3169
Cache-Control: max-age=113519
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:27:38 GMT
Etag: "63c7b6a8-1d7"
Expires: Fri, 20 Jan 2023 09:59:37 GMT
Last-Modified: Wed, 18 Jan 2023 09:06:48 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash2b46ec08f5f6c1ee72c811e705f0d2ab e826c1d179b15c66e1747bf0a6512a1cc2888d36 9513d9f386f5ba578e57460ac1139949f63da5af30a45232f4984843d82968b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9513D9F386F5BA578E57460AC1139949F63DA5AF30A45232F4984843D82968B0"
Last-Modified: Tue, 17 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21563
Expires: Thu, 19 Jan 2023 08:27:02 GMT
Date: Thu, 19 Jan 2023 02:27:39 GMT
Connection: keep-alive
|
|
| push.services.mozilla.com/ | 35.86.11.8 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.86.11.8:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Bztzeu58q7NQOJtSd4YwOQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: xIMxyFNvV+I80BW9V5nhvUfuw2w=
|
|
| bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat | 150.95.113.28 | 301 Moved Permanently | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:39 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
x-pingback: https://bangcapchungchitoanquoc.com/xmlrpc.php
x-redirect-by: WordPress
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7db9f11a1c6ab0117ed3dd1d36e3aecc 61a4de77803ce4ad730c21dd88b5b55a196f26d6 b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3077
Expires: Thu, 19 Jan 2023 03:18:57 GMT
Date: Thu, 19 Jan 2023 02:27:40 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7db9f11a1c6ab0117ed3dd1d36e3aecc 61a4de77803ce4ad730c21dd88b5b55a196f26d6 b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3077
Expires: Thu, 19 Jan 2023 03:18:57 GMT
Date: Thu, 19 Jan 2023 02:27:40 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7db9f11a1c6ab0117ed3dd1d36e3aecc 61a4de77803ce4ad730c21dd88b5b55a196f26d6 b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3077
Expires: Thu, 19 Jan 2023 03:18:57 GMT
Date: Thu, 19 Jan 2023 02:27:40 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7db9f11a1c6ab0117ed3dd1d36e3aecc 61a4de77803ce4ad730c21dd88b5b55a196f26d6 b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3077
Expires: Thu, 19 Jan 2023 03:18:57 GMT
Date: Thu, 19 Jan 2023 02:27:40 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7db9f11a1c6ab0117ed3dd1d36e3aecc 61a4de77803ce4ad730c21dd88b5b55a196f26d6 b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3077
Expires: Thu, 19 Jan 2023 03:18:57 GMT
Date: Thu, 19 Jan 2023 02:27:40 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28666e20-8b0b-428c-af81-822361800b23.jpeg | 34.120.237.76 | 200 OK | 6.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28666e20-8b0b-428c-af81-822361800b23.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashee23b50996d59e5b3d4d99af0d0bc05f 76fbdbd85092cb841ca269206de46cc1b6e0f215 20e83f1e7f48eaee8f946958d4bd94d0c876dd2fdab85f3c4dfe088d7726e0eb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28666e20-8b0b-428c-af81-822361800b23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6902
x-amzn-requestid: eac4818f-27cf-4e74-967f-ba9b761e236f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0uNuF0QIAMFUEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4f724-3a8ae0ba482b10f04c90c3b5;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 07:05:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AKGI_lQSNDKkYkcLfgIsQOt8ghMJbouQt26TehAyOBDEkg0ZU-L_Tw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 07:32:30 GMT
age: 68110
etag: "76fbdbd85092cb841ca269206de46cc1b6e0f215"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa13fdc43-f169-4fe6-a14b-6ed62c4d08cc.jpeg | 34.120.237.76 | 200 OK | 7.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa13fdc43-f169-4fe6-a14b-6ed62c4d08cc.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7817aa566a3271f82153811b756bb90f 6be8688f3b8d2f053afed5c09d00e71ad9210258 1ec4a11d1598683001714eb1a130c5ba96c37aef0e43623a17780f848543b1c9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa13fdc43-f169-4fe6-a14b-6ed62c4d08cc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7864
x-amzn-requestid: 932e4550-d62d-448d-b60d-d3c62944c86c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3fnEEVOIAMFZcA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c612f9-0977cfca7fe22f83168e5d9e;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rcBwm967yrKleLXr5OzF8SynTLuZIXY85zeUwRyCP56tAt5ChjIapg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 03:43:10 GMT
age: 81870
etag: "6be8688f3b8d2f053afed5c09d00e71ad9210258"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb7a0759c043594fbe85af422b59b8227 a05cfaad16078f42218dae233da38f6f5dff8487 e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Ew6UYM2a_TNmSJNwTdR0fKiQg4V05R0RsS1rPp0sMOZ4Cn7-TJc3_A==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 21:45:29 GMT
age: 16931
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F358af8d7-be1d-4bbe-ab3e-a9efaf49e1ac.jpeg | 34.120.237.76 | 200 OK | 5.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F358af8d7-be1d-4bbe-ab3e-a9efaf49e1ac.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2b8f931fb5afe958e67fce9e1822dac4 5732887999b819f6facc6f4608a407b5a09adf75 3c6c787e700f8139ec0eeaad93923f647f9efa5ce60120fc0aab52fa9588efaf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F358af8d7-be1d-4bbe-ab3e-a9efaf49e1ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5005
x-amzn-requestid: 647dd62e-6b47-4298-9457-c7f37e653e0e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e5qLKEX6IAMFX0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c6f0ad-3dc1396c1b3662fa4ec5f1fa;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 19:02:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oi7K1Z45sral6ne0AsNTVD5vGc4WbZ7acJoq--4NFhN_f2z-xq7pWQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 21:55:43 GMT
etag: "5732887999b819f6facc6f4608a407b5a09adf75"
content-type: image/jpeg
age: 16317
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4d15f9a-9958-436b-ac3e-167b5a6563ea.jpeg | 34.120.237.76 | 200 OK | 3.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4d15f9a-9958-436b-ac3e-167b5a6563ea.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb1b47910c4f71976f73a884bcae6f9bc 26c0d42fddb2a02d9878c34a76874710c92a9d30 9c5ce4945939b126cd36202f5afb8009ce790a792270ec31cc22099e4cd12a24
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4d15f9a-9958-436b-ac3e-167b5a6563ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3861
x-amzn-requestid: c8fbb2e1-9ec6-42c0-8030-9be785e8913e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9TegFNEoAMFwqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c865f6-04a9e7db684e88ed69e1bd43;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:34:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0vlLtF3fPmIBiYrKVY8qBwVvS7PMn3OTGpu6C0umuCqXdzYxsF-xgQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 21:53:12 GMT
age: 16468
etag: "26c0d42fddb2a02d9878c34a76874710c92a9d30"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f344d-12b3-4719-9ecf-6191897f233e.jpeg | 34.120.237.76 | 200 OK | 6.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f344d-12b3-4719-9ecf-6191897f233e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb015242ebdda9cc22cfe6741d2e926f1 76072223007cd11c6f7b9fda8f01818ab0fea740 b7a72c737cac91c83c39718de999bc6ff0ec4ede63342e86407190d95e60d9a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f344d-12b3-4719-9ecf-6191897f233e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6908
x-amzn-requestid: 5f0a0b3b-1d4c-450e-bcd5-481bda79f4e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eq1qQHwYIAMF-IQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1030e-62d053e35c8ab2374fd2fe35;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 07:06:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1eiEXaC2jHawVVHg6KAlFvdV7ZMpXdCaN8o36sbYL9WwPvXejGobKA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 17:36:56 GMT
age: 31844
etag: "76072223007cd11c6f7b9fda8f01818ab0fea740"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash532289832b1f21cd9014c904ca0a1ad6 16b0dbd03283cf8a80316e49ab0a0299fd237d99 e0b0758c8bea976e4963c7ca91cc223d9b68f1e45048dd9d5cce73c9f20a08a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:27:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash607bf9684e4803d817fdd1120427dcdd 886fa77396c792751868f05806793937a4f11be6 d17df5470015b9c3be3fc1e9c8fa5f2b732231eed453b689e94897f6f1da3911
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:27:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash783c01fa14ade2316e22ead869b3dbf8 71e20a947b3a9e10cb2bf046e2ca3da294d97f70 9b0aee93ad83dd0c14a106a2514b86ab950b2fc679596fd621841242b5c7e95c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:27:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/recaptcha/api.js?hl=vi | 142.250.74.132 | 200 OK | 555 B |
URL HTTP/2www.google.com/recaptcha/api.js?hl=vi IP142.250.74.132:0
File typeASCII text, with very long lines (850), with no line terminators Hash618b1945069ff465cbed6f2dda260b6e 4017f86cdab4acbba107826d967a94924a8ccefd e86fabdca78829ef9e95afd570e1b68555d994b4220a95853cdb0d1d44cc4f85
GET /recaptcha/api.js?hl=vi HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 19 Jan 2023 02:27:40 GMT
date: Thu, 19 Jan 2023 02:27:40 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 555
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-158051703-1 | 142.250.74.40 | 200 OK | 44 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-158051703-1 IP142.250.74.40:0
File typeASCII text, with very long lines (1921) Hash98765adcdc3360035edd3e533c9746da 3215e67bf15a4e82193071073622c9e8df852639 3d1c6f5de54127d9b7932c8087d831177a0d8e0ebb125a9f0f9a23320d41a7b5
GET /gtag/js?id=UA-158051703-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 19 Jan 2023 02:27:40 GMT
expires: Thu, 19 Jan 2023 02:27:40 GMT
cache-control: private, max-age=900
last-modified: Thu, 19 Jan 2023 01:41:40 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43932
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash607bf9684e4803d817fdd1120427dcdd 886fa77396c792751868f05806793937a4f11be6 d17df5470015b9c3be3fc1e9c8fa5f2b732231eed453b689e94897f6f1da3911
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:27:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash96932e7ee122dfbe89a87a0265f8bf94 a260e5fb88fa73efaedcd7880f4bfea7acf44fbb e806134fe3187494ab16df5a777bb4d7b8d0a8c400b542a5414b63c7ef3ac3e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:27:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&subset=vietnamese&ver=5.4.12 | 142.250.74.106 | 200 OK | 2.0 kB |
URL HTTP/2fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&subset=vietnamese&ver=5.4.12 IP142.250.74.106:0
Hash91beae67d53eabfa8f3a4f1a66418336 edf5954bb802cbec48033bd4b84eac49f53daa47 5947f5040057b555f4e5296ebcef5d90c16db4df66a20714546d9152c13df6d7
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&subset=vietnamese&ver=5.4.12 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 19 Jan 2023 02:27:40 GMT
date: Thu, 19 Jan 2023 02:27:40 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=2.9.8 | 150.95.113.28 | 200 OK | 13 kB |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=2.9.8 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Hash1a7d1a4ea3a83448e3739686b234e5e5 7dc8a186371f218faf5ea03f789648a8f835385b 7ab5b05ace321d314e96d1a4456dfd383b21d9a11e4c5d72ceb93bd8b5fcea3a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=2.9.8 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Mon, 18 May 2020 02:35:53 GMT
vary: Accept-Encoding
etag: W/"5ec1f489-df5c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bangcapchungchitoanquoc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 18 Jan 2023 19:33:54 GMT
expires: Thu, 18 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 24827
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.12.0 | 150.95.113.28 | 200 OK | 779 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.12.0 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Hash3770c297c09d837aa52eb1a9d9bdb877 a9feef307070af04f7984765ee33bb2aea0723ba b385fcc8e5021a797355fb6f6e009bcfe2913c7bf4f69c894099948978bb4bf9
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.12.0 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Mon, 18 May 2020 02:35:53 GMT
vary: Accept-Encoding
etag: W/"5ec1f489-29c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-includes/css/dist/block-library/style.min.css?ver=5.4.12 | 150.95.113.28 | 200 OK | 24 kB |
URL HTTP/2bangcapchungchitoanquoc.com/wp-includes/css/dist/block-library/style.min.css?ver=5.4.12 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Hash4d6b52bb7f05c3e9d6b291f8e34249e7 9102d1e980f4e3bf5636be8e70157f1eb79ebe2a c1abe8c73a776ae3719ff0cfd0d1c2f822076fe4fd6e16aafde7c15661863163
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.4.12 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Mon, 18 May 2020 02:31:05 GMT
vary: Accept-Encoding
etag: W/"5ec1f369-d159"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2 | 142.250.74.35 | 200 OK | 12 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 11800, version 1.0\012- data Hashe36fccd06262bef92e7a9841e2202225 b907dd02819497b3942220e0aa160c167195506b 7f1c829b0c90fd664a03bb714a74f7d35d9e38ee1687104abc8ad5bd9c8ccb6c
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bangcapchungchitoanquoc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11800
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 15 Jan 2023 00:55:57 GMT
expires: Mon, 15 Jan 2024 00:55:57 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:25:05 GMT
content-type: font/woff2
age: 351104
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/themes/hello-elementor/style.min.css?ver=2.2.0 | 150.95.113.28 | 200 OK | 2.8 kB |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/themes/hello-elementor/style.min.css?ver=2.2.0 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Hash358e5fd7aa1cb754a4d709167e05d5e1 e6017bfbbc65e33256cdc57d5bd07ce57c7b6265 05f4f8c9b67a2b557a5d6262c100e36b4a7fd3f8245a116a288d2bab5efe3baf
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/themes/hello-elementor/style.min.css?ver=2.2.0 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Tue, 26 May 2020 04:05:05 GMT
vary: Accept-Encoding
etag: W/"5ecc9571-19f1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/uploads/elementor/css/global.css?ver=1589769415 | 150.95.113.28 | 200 OK | 20 kB |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/uploads/elementor/css/global.css?ver=1589769415 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Hash65b240379f82815122a7668596880886 ace97ab723cbc6b5e56fd1214cf41030df5a1f0a 5d428612e736fdf92d2dcffebe73e65eb21da7fe71db1c7176c7fbd296904f0f
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/elementor/css/global.css?ver=1589769415 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Mon, 18 May 2020 02:36:55 GMT
vary: Accept-Encoding
etag: W/"5ec1f4c7-5377"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=2.9.8 | 150.95.113.28 | 200 OK | 27 kB |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=2.9.8 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Hasha3209a3139a6c9b708488d9f68f9f383 9b5c7917623ae6b153bdcbc73f3b0d350f636384 31c106b797d27609bc1abcd3efd0aa5894bdb6579d8669ad530a686f4a674025
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=2.9.8 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Mon, 18 May 2020 02:35:53 GMT
vary: Accept-Encoding
etag: W/"5ec1f489-1b0f2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.9 | 150.95.113.28 | 200 OK | 16 kB |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.9 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Hashdead824971632e5079a6aa981037bfb8 3dab3486b3f73e347a801037d3f4fdc0ac9e06fd 9eeb8afe1dc1d32394198d3c5417bbceac9ad7adcc425902207613782ec56d3e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.9 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Wed, 27 May 2020 07:05:11 GMT
vary: Accept-Encoding
etag: W/"5ece1127-6d2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashdb72b0cf36b635e3c0825b954e3f0571 f0f3d97119b058f86553062c835f89b1b283945d bf6ecaa45a5dbd66d0c657e5f33345ac46bdc94d8cae1274fcaf01c0ff302b97
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:27:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| bangcapchungchitoanquoc.com/wp-content/uploads/elementor/css/post-460.css?ver=1657542747 | 150.95.113.28 | 200 OK | 13 kB |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/uploads/elementor/css/post-460.css?ver=1657542747 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Hashaa921b8443bc9b417bdd3fde58503f48 64d0c81709a33f5e434c5cee19b074ce0a10e7f6 791dab6bb781476c9431d560e9b4379c71bda1e72d46d9ca4c873ce77725c687
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/uploads/elementor/css/post-460.css?ver=1657542747 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Mon, 11 Jul 2022 12:32:27 GMT
vary: Accept-Encoding
etag: W/"62cc185b-d3d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/robotoslab/v24/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2 | 142.250.74.35 | 200 OK | 33 kB |
URL HTTP/2fonts.gstatic.com/s/robotoslab/v24/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 32860, version 1.0\012- data Hashd010a9f2d5c7a0374b3b84706a43d2ec c1fe465db08785c3f115555d39db23838960cb66 9a3993918629dfd6a59c4563e9b4d464152b51d4113957ab8ebfbdcbcdc7f536
GET /s/robotoslab/v24/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bangcapchungchitoanquoc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 32860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jan 2023 16:55:50 GMT
expires: Fri, 12 Jan 2024 16:55:50 GMT
cache-control: public, max-age=31536000
age: 552711
last-modified: Mon, 11 Jul 2022 19:12:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.6.2 | 150.95.113.28 | 200 OK | 20 kB |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.6.2 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Hash1828ebc84e203e987a5ed93a42d8a78a 21e3b366c861fb68fff3300ad4dfa9db684b6dcf 3a010e69b86ff093193c229b05a9fbed93aa68e3d2893a9bbaef5376e886a415
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.6.2 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Mon, 18 May 2020 02:35:53 GMT
vary: Accept-Encoding
etag: W/"5ec1f489-3e7e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/robotoslab/v24/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2 | 142.250.74.35 | 200 OK | 19 kB |
URL HTTP/2fonts.gstatic.com/s/robotoslab/v24/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 18976, version 1.0\012- data Hashbcdc818a3ae2c7d5cc098f9e4dd874af 55559471bc23c0ac5864c7ba7e4783ee15b5e496 e51239aa09176740bfe169ab69fc95fe22539cda70706b763a95e8d50722e3dd
GET /s/robotoslab/v24/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bangcapchungchitoanquoc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 15 Jan 2023 02:38:44 GMT
expires: Mon, 15 Jan 2024 02:38:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 19:12:10 GMT
content-type: font/woff2
age: 344937
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashdb72b0cf36b635e3c0825b954e3f0571 f0f3d97119b058f86553062c835f89b1b283945d bf6ecaa45a5dbd66d0c657e5f33345ac46bdc94d8cae1274fcaf01c0ff302b97
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:27:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| bangcapchungchitoanquoc.com/wp-content/themes/akasa-theme/js/jquery-scrolltofixed.js | 150.95.113.28 | 200 OK | 10 kB |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/themes/akasa-theme/js/jquery-scrolltofixed.js IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Hashc56937a00392d3b496e74d8f36d2d431 2947e73a5a2fed2dbcde44108540e3e243b43489 2c17024c50b62ddf831aac83362905da6f958eb2a048e904422d58605867557c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/themes/akasa-theme/js/jquery-scrolltofixed.js HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Wed, 27 May 2020 09:08:25 GMT
vary: Accept-Encoding
etag: W/"5ece2e09-584b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2 | 142.250.74.35 | 200 OK | 17 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 17336, version 1.0\012- data Hasheec8dbfc49267c4d33cf31b49661bf37 0f49d4563cf9e22e3af6907d0785b9a6facadbf0 661d4b208656c006e7aab58acf7784857963123675de2302279fbe6c05313547
GET /s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bangcapchungchitoanquoc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17336
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jan 2023 21:41:48 GMT
expires: Wed, 17 Jan 2024 21:41:48 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
age: 103553
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bangcapchungchitoanquoc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jan 2023 13:09:06 GMT
expires: Wed, 17 Jan 2024 13:09:06 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 134315
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.9 | 150.95.113.28 | 200 OK | 16 kB |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.9 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Hasheac85752d6981069a600936be843645b e7ae05446d594508b4c9965dd6dc4310fa3eaa89 949b98eac6952c4d09098eee11c038a5ad7423bbd8aa0f64de9a00e4a743fedf
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.9 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Wed, 27 May 2020 07:05:11 GMT
vary: Accept-Encoding
etag: W/"5ece1127-3923"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-includes/js/wp-emoji-release.min.js?ver=5.4.12 | 150.95.113.28 | 200 OK | 16 kB |
URL HTTP/2bangcapchungchitoanquoc.com/wp-includes/js/wp-emoji-release.min.js?ver=5.4.12 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Hash55a3138a2334c83aba0f40dbb0da0a90 c493a2208b2a9898dc08b77e08e7db82918122ed fcf8a4d6835e15f73dbffd19cb5b706f3eb7c9e4f9ca05f478904727de2e7549
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.4.12 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Thu, 15 Apr 2021 08:46:25 GMT
vary: Accept-Encoding
etag: W/"6077fd61-363c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2 | 142.250.74.35 | 200 OK | 5.6 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 5604, version 1.0\012- data Hash7cda2cfee99d697daf8c14819d9004eb 76f4002863493c93454a9f17424942f321287cba 0948409a22b5979aa7e1ec20da9e61f12e7d403800b541ece053881bd2542b70
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bangcapchungchitoanquoc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 18 Jan 2023 10:14:10 GMT
expires: Thu, 18 Jan 2024 10:14:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:41 GMT
content-type: font/woff2
age: 58411
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashdb72b0cf36b635e3c0825b954e3f0571 f0f3d97119b058f86553062c835f89b1b283945d bf6ecaa45a5dbd66d0c657e5f33345ac46bdc94d8cae1274fcaf01c0ff302b97
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:27:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2 | 142.250.74.35 | 200 OK | 5.5 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 5548, version 1.0\012- data Hashcdaab83619fcacd4027a77c99dd51e69 9e6eae8554f8cc2309b2dae2d9fa217e34eed6a4 4ec57f2a80b91090971b83970230ca09ab3568c5f5b224896ca9aa6180a76aa9
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bangcapchungchitoanquoc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5548
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jan 2023 11:38:45 GMT
expires: Fri, 12 Jan 2024 11:38:45 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 571736
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2 | 142.250.74.35 | 200 OK | 5.5 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 5468, version 1.0\012- data Hash6f623ab6fb9356a3f9c38af021f48892 86db1a8455028bcc5ae9b55ef1a206d85a438109 3a38c967413f7bce36d3baefc321aade81edf369e6a99dc32d911550148f636f
GET /s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bangcapchungchitoanquoc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5468
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 15 Jan 2023 18:05:12 GMT
expires: Mon, 15 Jan 2024 18:05:12 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:55 GMT
content-type: font/woff2
age: 289349
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2 | 142.250.74.35 | 200 OK | 5.9 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 5928, version 1.0\012- data Hash791faa85fafa7cb786504f9c934206f1 1f93b5af14b6795e3b89bfefbe363100df1cc26d 0b68e8634c96265eb32a0c769416b5b02215ee3fee0c9e228f3455dc13ecabaf
GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bangcapchungchitoanquoc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jan 2023 14:50:08 GMT
expires: Wed, 17 Jan 2024 14:50:08 GMT
cache-control: public, max-age=31536000
age: 128253
last-modified: Wed, 11 May 2022 19:24:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/robotoslab/v24/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2 | 142.250.74.35 | 200 OK | 8.6 kB |
URL HTTP/2fonts.gstatic.com/s/robotoslab/v24/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 8640, version 1.0\012- data Hash6130e0387c460e53a60bf8ef1a16cbe1 856ad0a2cbe873a091fe63760ba7b866eba3593d 421720872a60359471c47b84bd6b0ac598c257a93f4007790c195422d9bf727f
GET /s/robotoslab/v24/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bangcapchungchitoanquoc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8640
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jan 2023 02:38:16 GMT
expires: Fri, 12 Jan 2024 02:38:16 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 19:14:26 GMT
content-type: font/woff2
age: 604165
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=2.9.8 | 150.95.113.28 | 200 OK | 7.9 kB |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=2.9.8 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Hashf82b9e2a6a4c0c05df3f4f1d5048a196 2321a1cd70df287afa7024f88eaef462cc795d3e 03bf401669a25dce86050d770c24d4ca0d91cf4e2d5824fb003da0d0738ee891
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=2.9.8 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Mon, 18 May 2020 02:35:53 GMT
vary: Accept-Encoding
etag: W/"5ec1f489-684e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/kk-star-ratings/public/svg/inactive.svg | 150.95.113.28 | 200 OK | 223 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/kk-star-ratings/public/svg/inactive.svg IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
File typeSVG Scalable Vector Graphics image\012- , ASCII text Hash4182aeffd2826f5ee6a4148396bab67e 25d3d2b538342a0387a3f8340fd8bab32df6aad7 0d06a8516d69db767242f13cc35e99194cf0d263fd5221673ac5aef02723e3c0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/kk-star-ratings/public/svg/inactive.svg HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/wp-content/plugins/kk-star-ratings/public/css/kk-star-ratings.css?ver=4.1.3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:41 GMT
content-type: image/svg+xml
content-length: 223
last-modified: Wed, 27 May 2020 07:18:45 GMT
etag: "5ece1455-df"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/kk-star-ratings/public/svg/active.svg | 150.95.113.28 | 200 OK | 243 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/kk-star-ratings/public/svg/active.svg IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
File typeSVG Scalable Vector Graphics image\012- , ASCII text Hash92b96aba44cc293472887fcda4526648 8be9671727114d7acc98e511cbe559fccba707e7 c91f2e258df01f2df97b56f638878a261e4c379f44cdb5fd5e1879c8eefcfb07
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/kk-star-ratings/public/svg/active.svg HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/wp-content/plugins/kk-star-ratings/public/css/kk-star-ratings.css?ver=4.1.3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:41 GMT
content-type: image/svg+xml
content-length: 243
last-modified: Wed, 27 May 2020 07:18:45 GMT
etag: "5ece1455-f3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.46 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.46:0
File typeASCII text, with very long lines (1490) Hashca7fbbfd120e3e329633044190bbf134 d17f81e03dd827554ddd207ea081fb46b3415445 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 19 Jan 2023 01:45:20 GMT
expires: Thu, 19 Jan 2023 03:45:20 GMT
cache-control: public, max-age=7200
age: 2546
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 | 150.95.113.28 | 200 OK | 76 kB |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
File typeWeb Open Font Format (Version 2), TrueType, length 76084, version 330.-16253\012- data Hashf6121be597a72928f54e7ab5b95512a1 b2c74520c3f506efbfefca867918e5ae28bd5222 787d76ad6deab67ccf8bac1b584260205e114f508fc5542b612e3f75d49a34e4
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.12.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:41 GMT
content-type: font/woff2
content-length: 76084
last-modified: Mon, 18 May 2020 02:35:53 GMT
etag: "12934-5a5e3059a322d"
accept-ranges: bytes
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=2.9.8 | 150.95.113.28 | 200 OK | 80 kB |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=2.9.8 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Hashb8358c9138824ddfb7ac47283c048242 c08222ae3d7f08b9a0d6ee389ad539b1785482ff b38505f3b5b92a99ddcf637f7214011ba06564d1f8410788e3a77a521976b1a2
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=2.9.8 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Mon, 18 May 2020 02:35:53 GMT
vary: Accept-Encoding
etag: W/"5ec1f489-3acf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=2.9.4 | 150.95.113.28 | 200 OK | 102 kB |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=2.9.4 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
Size102 kB (102497 bytes) Hash0c3526f786ea97db24133c1d6f84f237 ec013fb7557309a40ffd3b714e11dfd32f14cf0c 1ae501a5f84c2d295e1a38a80e9ac1f5a5559e07c1eb442d3bc6ee3b8bdaa0bc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=2.9.4 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Mon, 18 May 2020 02:35:54 GMT
vary: Accept-Encoding
etag: W/"5ec1f48a-322ac"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/jet-tricks/assets/js/jet-tricks-frontend.js?ver=1.2.8 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/jet-tricks/assets/js/jet-tricks-frontend.js?ver=1.2.8 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/jet-tricks/assets/js/jet-tricks-frontend.js?ver=1.2.8 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Mon, 30 Mar 2020 08:36:54 GMT
vary: Accept-Encoding
etag: W/"5e81afa6-4e34"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Mon, 18 May 2020 02:35:53 GMT
vary: Accept-Encoding
etag: W/"5ec1f489-21fb7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/uploads/elementor/css/post-587.css?ver=1657542593 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/uploads/elementor/css/post-587.css?ver=1657542593 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/uploads/elementor/css/post-587.css?ver=1657542593 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Mon, 11 Jul 2022 12:29:53 GMT
vary: Accept-Encoding
etag: W/"62cc17c1-1ced"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/fixed-toc/frontend/assets/js/ftoc.min.js?ver=5.4.12 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/fixed-toc/frontend/assets/js/ftoc.min.js?ver=5.4.12 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/fixed-toc/frontend/assets/js/ftoc.min.js?ver=5.4.12 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Mon, 30 Mar 2020 09:59:25 GMT
vary: Accept-Encoding
etag: W/"5e81c2fd-63a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Wed, 07 Nov 2018 09:03:52 GMT
vary: Accept-Encoding
etag: W/"5be2aa78-2748"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-includes/js/imagesloaded.min.js?ver=3.2.0 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-includes/js/imagesloaded.min.js?ver=3.2.0 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/js/imagesloaded.min.js?ver=3.2.0 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Mon, 18 May 2020 02:31:05 GMT
vary: Accept-Encoding
etag: W/"5ec1f369-1fd4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/contact-form-7/images/ajax-loader.gif | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/contact-form-7/images/ajax-loader.gif IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/images/ajax-loader.gif HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:42 GMT
content-type: image/gif
last-modified: Wed, 27 May 2020 07:05:11 GMT
vary: Accept-Encoding
etag: W/"5ece1127-34f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.12.0 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.12.0 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.12.0 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Mon, 18 May 2020 02:35:53 GMT
vary: Accept-Encoding
etag: W/"5ec1f489-d9c9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/uploads/2020/03/mua-bang-ielts-2.jpg | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/uploads/2020/03/mua-bang-ielts-2.jpg IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2020/03/mua-bang-ielts-2.jpg HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: image/jpeg
last-modified: Sat, 14 Mar 2020 16:39:17 GMT
vary: Accept-Encoding
etag: W/"5e6d08b5-f8e3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=2.9.4 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=2.9.4 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=2.9.4 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Mon, 18 May 2020 02:35:54 GMT
vary: Accept-Encoding
etag: W/"5ec1f48a-19c3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/wp-postratings/images/stars/rating_over.gif | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/wp-postratings/images/stars/rating_over.gif IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/wp-postratings/images/stars/rating_over.gif HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:41 GMT
content-type: image/gif
last-modified: Tue, 26 May 2020 04:01:07 GMT
vary: Accept-Encoding
etag: W/"5ecc9483-20b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/themes/hello-elementor/theme.min.css?ver=2.2.0 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/themes/hello-elementor/theme.min.css?ver=2.2.0 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/themes/hello-elementor/theme.min.css?ver=2.2.0 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Tue, 26 May 2020 04:05:05 GMT
vary: Accept-Encoding
etag: W/"5ecc9571-146f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/uploads/2022/05/thong-tin-ve-giay-phep-lai-xe-hang-a1-400x300.jpg | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/uploads/2022/05/thong-tin-ve-giay-phep-lai-xe-hang-a1-400x300.jpg IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2022/05/thong-tin-ve-giay-phep-lai-xe-hang-a1-400x300.jpg HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: image/jpeg
last-modified: Tue, 10 May 2022 16:42:26 GMT
vary: Accept-Encoding
etag: W/"627a95f2-7440"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/kk-star-ratings/public/js/kk-star-ratings.js?ver=4.1.3 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/kk-star-ratings/public/js/kk-star-ratings.js?ver=4.1.3 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/kk-star-ratings/public/js/kk-star-ratings.js?ver=4.1.3 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Wed, 27 May 2020 07:18:45 GMT
vary: Accept-Encoding
etag: W/"5ece1455-77f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/uploads/2019/10/50-Beautiful-and-Minimalist-Presentation-Backgrounds-025.jpg | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/uploads/2019/10/50-Beautiful-and-Minimalist-Presentation-Backgrounds-025.jpg IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2019/10/50-Beautiful-and-Minimalist-Presentation-Backgrounds-025.jpg HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/wp-content/uploads/elementor/css/post-587.css?ver=1657542593
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:41 GMT
content-type: image/jpeg
last-modified: Wed, 23 Oct 2019 04:00:53 GMT
vary: Accept-Encoding
etag: W/"5dafd075-1c037"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/uploads/elementor/css/post-450.css?ver=1657291788 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/uploads/elementor/css/post-450.css?ver=1657291788 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/uploads/elementor/css/post-450.css?ver=1657291788 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Fri, 08 Jul 2022 14:49:48 GMT
vary: Accept-Encoding
etag: W/"62c8440c-3155"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/uploads/2019/03/thac-si-1-1.jpg | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/uploads/2019/03/thac-si-1-1.jpg IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2019/03/thac-si-1-1.jpg HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: image/jpeg
last-modified: Fri, 08 Mar 2019 01:54:24 GMT
vary: Accept-Encoding
etag: W/"5c81cb50-13b88f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/uploads/2022/04/untitled-design-17-400x300.jpg | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/uploads/2022/04/untitled-design-17-400x300.jpg IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2022/04/untitled-design-17-400x300.jpg HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: image/jpeg
last-modified: Mon, 11 Apr 2022 06:38:55 GMT
vary: Accept-Encoding
etag: W/"6253ccff-6f9b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/wp-postratings/js/postratings-js.js?ver=1.88 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/wp-postratings/js/postratings-js.js?ver=1.88 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/wp-postratings/js/postratings-js.js?ver=1.88 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Tue, 26 May 2020 04:01:07 GMT
vary: Accept-Encoding
etag: W/"5ecc9483-d01"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=2.9.8 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=2.9.8 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=2.9.8 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Mon, 18 May 2020 02:35:53 GMT
vary: Accept-Encoding
etag: W/"5ec1f489-e983"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Mon, 18 May 2020 02:35:54 GMT
vary: Accept-Encoding
etag: W/"5ec1f48a-6272"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-includes/js/jquery/ui/position.min.js?ver=1.11.4 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-includes/js/jquery/ui/position.min.js?ver=1.11.4 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/js/jquery/ui/position.min.js?ver=1.11.4 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Thu, 15 Apr 2021 08:46:25 GMT
vary: Accept-Encoding
etag: W/"6077fd61-1926"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/uploads/2019/03/DH-Y-Thai-nguyen.jpg | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/uploads/2019/03/DH-Y-Thai-nguyen.jpg IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2019/03/DH-Y-Thai-nguyen.jpg HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: image/jpeg
last-modified: Fri, 08 Mar 2019 01:56:44 GMT
vary: Accept-Encoding
etag: W/"5c81cbdc-29c9d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=2.9.8 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=2.9.8 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=2.9.8 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Mon, 18 May 2020 02:35:53 GMT
vary: Accept-Encoding
etag: W/"5ec1f489-a4b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/themes/akasa-theme/style.css?ver=1.0.0 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/themes/akasa-theme/style.css?ver=1.0.0 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/themes/akasa-theme/style.css?ver=1.0.0 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Wed, 27 May 2020 07:58:24 GMT
vary: Accept-Encoding
etag: W/"5ece1da0-429"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/uploads/2022/04/untitled-design-17-1536x1086.jpg | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/uploads/2022/04/untitled-design-17-1536x1086.jpg IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2022/04/untitled-design-17-1536x1086.jpg HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: image/jpeg
last-modified: Mon, 11 Apr 2022 06:38:55 GMT
vary: Accept-Encoding
etag: W/"6253ccff-341dc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.7.6 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.7.6 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.7.6 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Mon, 18 May 2020 02:35:53 GMT
vary: Accept-Encoding
etag: W/"5ec1f489-29c7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=2.9.8 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=2.9.8 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=2.9.8 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Mon, 18 May 2020 02:35:53 GMT
vary: Accept-Encoding
etag: W/"5ec1f489-1c56c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/kk-star-ratings/public/css/kk-star-ratings.css?ver=4.1.3 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/kk-star-ratings/public/css/kk-star-ratings.css?ver=4.1.3 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/kk-star-ratings/public/css/kk-star-ratings.css?ver=4.1.3 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Wed, 27 May 2020 07:18:45 GMT
vary: Accept-Encoding
etag: W/"5ece1455-ba4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/uploads/2019/10/hotline.png | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/uploads/2019/10/hotline.png IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2019/10/hotline.png HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: image/png
last-modified: Sun, 20 Oct 2019 07:55:48 GMT
vary: Accept-Encoding
etag: W/"5dac1304-35a2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/uploads/2020/03/mua-bang-ielts-3.jpg | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/uploads/2020/03/mua-bang-ielts-3.jpg IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2020/03/mua-bang-ielts-3.jpg HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: image/jpeg
last-modified: Sat, 14 Mar 2020 16:39:08 GMT
vary: Accept-Encoding
etag: W/"5e6d08ac-3660a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/uploads/2019/10/icon-menu-right2.png | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/uploads/2019/10/icon-menu-right2.png IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2019/10/icon-menu-right2.png HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: image/png
last-modified: Thu, 24 Oct 2019 02:50:19 GMT
vary: Accept-Encoding
etag: W/"5db1116b-66a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-includes/js/wp-embed.min.js?ver=5.4.12 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-includes/js/wp-embed.min.js?ver=5.4.12 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-includes/js/wp-embed.min.js?ver=5.4.12 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Thu, 15 Apr 2021 08:46:25 GMT
vary: Accept-Encoding
etag: W/"6077fd61-592"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=2.9.8 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=2.9.8 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=2.9.8 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Mon, 18 May 2020 02:35:53 GMT
vary: Accept-Encoding
etag: W/"5ec1f489-4824"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/uploads/2018/11/dai-hoc-5-1.jpg | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/uploads/2018/11/dai-hoc-5-1.jpg IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2018/11/dai-hoc-5-1.jpg HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: image/jpeg
last-modified: Tue, 13 Nov 2018 11:09:24 GMT
vary: Accept-Encoding
etag: W/"5beab0e4-16ac1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Fri, 14 Jun 2019 01:50:41 GMT
vary: Accept-Encoding
etag: W/"5d02fd71-17a69"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=2.9.4 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=2.9.4 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=2.9.4 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Mon, 18 May 2020 02:35:54 GMT
vary: Accept-Encoding
etag: W/"5ec1f48a-18ab1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: application/javascript
last-modified: Mon, 18 May 2020 02:35:53 GMT
vary: Accept-Encoding
etag: W/"5ec1f489-2fa6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/jet-tricks/assets/css/jet-tricks-frontend.css?ver=1.2.8 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/jet-tricks/assets/css/jet-tricks-frontend.css?ver=1.2.8 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/jet-tricks/assets/css/jet-tricks-frontend.css?ver=1.2.8 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Mon, 30 Mar 2020 08:36:54 GMT
vary: Accept-Encoding
etag: W/"5e81afa6-56f4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/ | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/ IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/ HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-pingback: https://bangcapchungchitoanquoc.com/xmlrpc.php
link: <https://bangcapchungchitoanquoc.com/wp-json/>; rel="https://api.w.org/", <https://bangcapchungchitoanquoc.com/?p=2027>; rel=shortlink
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/wp-postratings/css/postratings-css.css?ver=1.88 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/wp-postratings/css/postratings-css.css?ver=1.88 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/wp-postratings/css/postratings-css.css?ver=1.88 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Tue, 26 May 2020 04:01:07 GMT
vary: Accept-Encoding
etag: W/"5ecc9483-549"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/fixed-toc/frontend/assets/css/ftoc.min.css?ver=5.4.12 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/fixed-toc/frontend/assets/css/ftoc.min.css?ver=5.4.12 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/fixed-toc/frontend/assets/css/ftoc.min.css?ver=5.4.12 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Mon, 30 Mar 2020 09:59:25 GMT
vary: Accept-Encoding
etag: W/"5e81c2fd-7f37"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.12.0 | 150.95.113.28 | 200 OK | 0 B |
URL HTTP/2bangcapchungchitoanquoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.12.0 IP150.95.113.28:0 ASN#131392 GMO-Z.com Runsystem Joint Stock Company
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.12.0 HTTP/1.1
Host: bangcapchungchitoanquoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bangcapchungchitoanquoc.com/chuyen-cung-cap-chung-chi-tieng-anh-ielts-chat-luong-nhat/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 19 Jan 2023 02:27:40 GMT
content-type: text/css
last-modified: Mon, 18 May 2020 02:35:53 GMT
vary: Accept-Encoding
etag: W/"5ec1f489-295"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
0.0.0.0