firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: MzN0buq_ijI45xjgbxOCUvyVsntgIy1GYv5sbt06SQ1Qfi1Jk0EPMQ==
Age: 51264
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5895
Expires: Thu, 06 Oct 2022 07:39:57 GMT
Date: Thu, 06 Oct 2022 06:01:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a1073a68ed38c8e3575e889224db944c
ee2a7a3e2da77a8540131f9ffaa0a20d4dd486bd
a9fb1f7ade7c8a79d2ee83e9b7215e66dc89ac733b11079297a8f4b9aceae1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A9FB1F7ADE7C8A79D2EE83E9B7215E66DC89AC733B11079297A8F4B9ACEAE1F5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12210
Expires: Thu, 06 Oct 2022 09:25:12 GMT
Date: Thu, 06 Oct 2022 06:01:42 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: qsnlR6lAK6oRNI7CxLWOWZyHSRyG8wcBH9FlLpi1MEKdvG9zoYjfl7HOa678tdPYWByqzmay9+A=
x-amz-request-id: KC5AB3ACKRF1578Y
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 06 Oct 2022 05:58:38 GMT
age: 184
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 06:01:42 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
garayvidalabogados.com/wjcxnu49.zip
301 Moved Permanently 0 B URL HTTP/1.1 garayvidalabogados.com/wjcxnu49.zip
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /wjcxnu49.zip HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 06 Oct 2022 06:01:42 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://garayvidalabogados.com/wjcxnu49.zip
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 18b813127673c0e8d8ae5df3abb89b97
f5b5b0a02f745487118745533dcb7d80b6e23ab2
3c00f0e56c985591af08686628d81ad9d5eda18f35e720c046d5ee5fdf5e288e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C00F0E56C985591AF08686628D81AD9D5EDA18F35E720C046D5EE5FDF5E288E"
Last-Modified: Tue, 04 Oct 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7138
Expires: Thu, 06 Oct 2022 08:00:41 GMT
Date: Thu, 06 Oct 2022 06:01:43 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Thu, 06 Oct 2022 05:29:41 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Thu, 06 Oct 2022 05:58:53 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3msM8q3u9Nb2Krjowg2tq4t3j1zfRrNwRHXZnSTf443JlmFca6pYUQ==
Age: 1922
ocsp.digicert.com/
200 OK 471 B IP
Hash 1561c6be7c89d1357a80d12de47b6e74
9a705277922ecca583c867af58b3efce099f83bd
e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5862
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 06:01:43 GMT
Last-Modified: Thu, 06 Oct 2022 04:24:01 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
garayvidalabogados.com/wjcxnu49.zip
404 Not Found 11 kB URL HTTP/2 garayvidalabogados.com/wjcxnu49.zip
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3543), with CRLF, LF line terminators
Hash fd502fcf07b62bd226be66760efe0c64
74ebfd0173e0e790532b5f36583f73bcdda6b69c
052d1ffee3c08b2175fa748eaed90c7cbd888234db315f31392a0377c5a470dd
Analyzer Verdict Alert fortinet Malware
GET /wjcxnu49.zip HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://garayvidalabogados.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
content-length: 10563
content-type: text/html; charset=UTF-8
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 06:01:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YA50UGlKwBVIkq5TH839Zg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: BESZ6Nxweh+mA8yf1oz14FZkLPE=
garayvidalabogados.com/wp-content/plugins/cliengo/public/css/cliengo-public.css?ver=2.0.2
200 OK 171 B URL HTTP/2 garayvidalabogados.com/wp-content/plugins/cliengo/public/css/cliengo-public.css?ver=2.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 5dd738995a128cde812d9e87ff300583
eb30064b576e05e53520243a83dd6a8c29d89054
95567d8b619c28200d317b4abe3c73751b8c6d0cbad3376ce62c7319e81b7d32
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/cliengo/public/css/cliengo-public.css?ver=2.0.2 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 09 Dec 2021 00:47:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 171
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/themes/dt-the7/fonts/FontAwesome/css/all.min.css?ver=9.10.0
200 OK 13 kB URL HTTP/2 garayvidalabogados.com/wp-content/themes/dt-the7/fonts/FontAwesome/css/all.min.css?ver=9.10.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (59158)
Hash e6b67e11736ae36a062b381717f2ea9f
a663a79bc8d42aa58bfea1351cc27e0d0b09c9b2
a07a94d36246d0b3e5b9b18e274e31995d0e23cda955babf5e350e91a879523d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/fonts/FontAwesome/css/all.min.css?ver=9.10.0 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:39 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12862
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-includes/css/dist/block-library/theme.min.css?ver=5.7.7
200 OK 855 B URL HTTP/2 garayvidalabogados.com/wp-includes/css/dist/block-library/theme.min.css?ver=5.7.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2714), with no line terminators
Hash 5215c97f1c2e6173b69a927aa0e682c4
34508cc3fd55fc9828d1fae46d83706dc9b2f320
e66c706c12fb67143cdbcc04796f0b43b08543588c1ea2f4c2325dc165725915
GET /wp-includes/css/dist/block-library/theme.min.css?ver=5.7.7 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:17:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 855
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=5.7.7
200 OK 4.6 kB URL HTTP/2 garayvidalabogados.com/wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=5.7.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (27639), with no line terminators
Hash a74d8a9e6361e6170342143743d34e52
033d08f24f8768a1d7cd92ba1d049a011bb585eb
c55a939cb1bad24f59b12c0533db6a87fecaede91efe8d6e285ae44dbb7990d5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=5.7.7 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 27 Aug 2020 23:48:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4644
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/themes/dt-the7/fonts/FontAwesome/back-compat.min.css?ver=9.10.0
200 OK 4.0 kB URL HTTP/2 garayvidalabogados.com/wp-content/themes/dt-the7/fonts/FontAwesome/back-compat.min.css?ver=9.10.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (19124), with no line terminators
Hash 635a864c0b99f0e98951d41cfeb768a3
5a5689e68b9fc486f1bd7c963d3669640a50787d
40cbd5b2598889f6182e49a949a1a436e435df585e4a9215b720699cf06ef49b
GET /wp-content/themes/dt-the7/fonts/FontAwesome/back-compat.min.css?ver=9.10.0 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:39 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4038
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-includes/css/dist/block-library/style.min.css?ver=5.7.7
200 OK 12 kB URL HTTP/2 garayvidalabogados.com/wp-includes/css/dist/block-library/style.min.css?ver=5.7.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (29677)
Hash 6539ab5ee2e6ce41ce90332ae53a59cf
9b382f6e6fcc1ad15c0cc5964be243a1eeda4418
162eefc63d682dd03fc355b58332614c5a0f701d57d7c899cc76326eaa2136f8
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.7 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:17:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 11763
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.5
200 OK 17 kB URL HTTP/2 garayvidalabogados.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Hash 5b0ccebb7e4b4e95064494b9f01d0dfd
fab4ac0f9ab41d9eafae0ca5b04a03db8c03d7e1
2a0f020bf9756c4bec3fc9d0527902ba81c2d1bf43673787425592dfcbdbc287
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.5 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 17424
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.min.css?ver=9.10.0
200 OK 3.0 kB URL HTTP/2 garayvidalabogados.com/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.min.css?ver=9.10.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (20017), with no line terminators
Hash 2fc741cbb4171230b41324be7990f017
9a6acd39eac287ac8db0f9aa5ff190b41bb7ea5c
6a981dd7d242280e6597cca1182e462a1170c3757ba5d1186120ff2f074da453
GET /wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.min.css?ver=9.10.0 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:39 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2989
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/plugins/cliengo/public/js/script_install_cliengo.js?ver=2.0.2
200 OK 235 B URL HTTP/2 garayvidalabogados.com/wp-content/plugins/cliengo/public/js/script_install_cliengo.js?ver=2.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (304), with no line terminators
Hash 5571e70e05f1c9718967bc8fc30155de
7b0fbb0d8df693fee8a71a8e6e1d6db808350164
8b69d0b2cdedaf2a2a3735ec2eb8992a262be8bcb83746fce5b387fd70589279
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/cliengo/public/js/script_install_cliengo.js?ver=2.0.2 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 06 Oct 2022 06:01:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 235
content-type: application/javascript
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash da3866ca8b2bc4ec78f51d7c5d9e3f89
ae14537cdfe5146a5522d5ea4f16a45e86045d59
cabb9c8c929a6e6528db52ff7da7581d48a317b4d49274e26ec5ca84031138d3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CABB9C8C929A6E6528DB52FF7DA7581D48A317B4D49274E26EC5CA84031138D3"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7082
Expires: Thu, 06 Oct 2022 07:59:46 GMT
Date: Thu, 06 Oct 2022 06:01:44 GMT
Connection: keep-alive
garayvidalabogados.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/2 garayvidalabogados.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:17:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/uploads/the7-css/css-vars.css?ver=27dd188f83ee
200 OK 6.2 kB URL HTTP/2 garayvidalabogados.com/wp-content/uploads/the7-css/css-vars.css?ver=27dd188f83ee
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash e32f34eec148ec195f654e6a0fd0d01a
ddd79cfc8ae8764fffdb55102cfe3f3e08925102
ea322634ce1cd4c8f429ae6bc6a1638e2c7df822e65a0d9dee264fb8db0430a8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/the7-css/css-vars.css?ver=27dd188f83ee HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:18:41 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6217
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/plugins/dt-the7-core/assets/js/post-type.min.js?ver=2.5.5.2
200 OK 9.2 kB URL HTTP/2 garayvidalabogados.com/wp-content/plugins/dt-the7-core/assets/js/post-type.min.js?ver=2.5.5.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (25739), with no line terminators
Hash df7cb2e5c2cee0f8634411826ddda12d
662c4dda06acd31c05d80c47ef111882faf4fd0f
4f0db0298b366c4e24b541c6280359eb87e40d13d1f1a2e8f6854a8f3b202872
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/dt-the7-core/assets/js/post-type.min.js?ver=2.5.5.2 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:17:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9177
content-type: application/javascript
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/uploads/2020/08/logo-peque.jpg
200 OK 23 kB URL HTTP/2 garayvidalabogados.com/wp-content/uploads/2020/08/logo-peque.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2020:08:28 12:12:59], baseline, precision 8, 221x80, components 3\012- data
Hash 373103ee63f2d78972ed0612729b4e95
d0e4ef218e94c001b54ac5f7a0fc7ee29c5abc86
3dd5581dc0860beea8ea82f77a4378f2e6d861abb75c02fd1c06d8032f6a5cde
GET /wp-content/uploads/2020/08/logo-peque.jpg HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Aug 2020 17:14:01 GMT
accept-ranges: bytes
content-length: 23219
content-type: image/jpeg
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-includes/js/wp-embed.min.js?ver=5.7.7
200 OK 777 B URL HTTP/2 garayvidalabogados.com/wp-includes/js/wp-embed.min.js?ver=5.7.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1391)
Hash 06ece4d01ee88297957c9f4cdcaa4df5
2b3321654a8ead1e1493eac9b5f1fdfb65e2037f
0b17eb6ab02e69f50ac52ca157375bd69853ae4f4796eb48a35eb4a12fc7af8b
GET /wp-includes/js/wp-embed.min.js?ver=5.7.7 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:17:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 777
content-type: application/javascript
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/themes/dt-the7/style.css?ver=9.10.0
200 OK 829 B URL HTTP/2 garayvidalabogados.com/wp-content/themes/dt-the7/style.css?ver=9.10.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (521)
Hash 77ac2525cabf13bb2151e4c6e33c575d
7c54d2ae319ffa1e3bd1b695f05343c7cdae16da
8486ba366d1beb6798d4491e5df4896647548d6dc8f5bd7ea8510cc5fb7d5008
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/style.css?ver=9.10.0 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 829
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/themes/dt-the7/lib/custom-scrollbar/custom-scrollbar.min.css?ver=9.10.0
200 OK 1.9 kB URL HTTP/2 garayvidalabogados.com/wp-content/themes/dt-the7/lib/custom-scrollbar/custom-scrollbar.min.css?ver=9.10.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9923), with no line terminators
Hash b8bf5e3b5cd3bc9a2cf21371dee03212
c299981b4423a610eec2ed419dc61dd53599af07
1ab5eacb0a1cd631a8724b5b9345980c55511104ce30caf999bc574cdceac65f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/lib/custom-scrollbar/custom-scrollbar.min.css?ver=9.10.0 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1890
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1
409 Conflict 83 B URL HTTP/2 garayvidalabogados.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/plugins/cliengo/public/js/cliengo-public.js?ver=2.0.2
200 OK 479 B URL HTTP/2 garayvidalabogados.com/wp-content/plugins/cliengo/public/js/cliengo-public.js?ver=2.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 5850a4d6be478b5a5c29526a957840c4
1854bff2c967f028cf8c1f53b3c7878fb605e329
654a9a69300dd841ea2bc14d36c346377cee298b126463cc844fb26929260843
GET /wp-content/plugins/cliengo/public/js/cliengo-public.js?ver=2.0.2 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 09 Dec 2021 00:47:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 479
content-type: application/javascript
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/uploads/the7-css/post-type-dynamic.css?ver=27dd188f83ee
200 OK 1.8 kB URL HTTP/2 garayvidalabogados.com/wp-content/uploads/the7-css/post-type-dynamic.css?ver=27dd188f83ee
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash b192f95257020b1c15033779b43afaf0
8d99d37fba7f801afd9c51823d4d26a0f4ecabe3
b98727a910eafebfc388c5188e71382bc82d5b1a6d885e7af1c44686cb4c0368
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/the7-css/post-type-dynamic.css?ver=27dd188f83ee HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:18:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1832
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-includes/js/wp-emoji-release.min.js?ver=5.7.7
200 OK 4.9 kB URL HTTP/2 garayvidalabogados.com/wp-includes/js/wp-emoji-release.min.js?ver=5.7.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11272)
Hash 365a77ff4ecd6f029c81de14e2522c73
2a817a1e1091bdf10e562b746e7e9619ed5ef5d5
a46d0e1f9b302519b11da0266586429a4d6eaf6fb2914c29f0e9208f7d2eb355
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.7.7 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:17:29 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4942
content-type: application/javascript
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/themes/dt-the7/lib/jquery-mousewheel/jquery-mousewheel.min.js?ver=9.10.0
200 OK 1.2 kB URL HTTP/2 garayvidalabogados.com/wp-content/themes/dt-the7/lib/jquery-mousewheel/jquery-mousewheel.min.js?ver=9.10.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2615), with no line terminators
Hash 0f0349169b9a4eed9710ad6d028d237a
ad30ec47a271acb90870b55476d864ee72b3c00c
f60d6fcc305a9c5afffcf0acf7ec0a68e7147097497640931c2450dee1936322
GET /wp-content/themes/dt-the7/lib/jquery-mousewheel/jquery-mousewheel.min.js?ver=9.10.0 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1185
content-type: application/javascript
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
piemse.com/assets/ico/piemse.png
200 OK 3.1 kB URL HTTP/2 piemse.com/assets/ico/piemse.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 120 x 120, 8-bit colormap, non-interlaced\012- data
Hash a266890f54dace0c2be28e55403256e9
5d5332e13f92285e7426357d69aad8a34557da5b
e146560a7f5e8ea1b3fa8eb3efa580419f2e43d2b05a243952d514990204445e
GET /assets/ico/piemse.png HTTP/1.1
Host: piemse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Sat, 29 Aug 2020 17:44:04 GMT
accept-ranges: bytes
content-length: 3126
content-type: image/png
date: Thu, 06 Oct 2022 06:01:44 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/themes/dt-the7/js/above-the-fold.min.js?ver=9.10.0
200 OK 3.8 kB URL HTTP/2 garayvidalabogados.com/wp-content/themes/dt-the7/js/above-the-fold.min.js?ver=9.10.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (8549), with no line terminators
Hash 7a922280148328443175f46aa4e2a654
7a45643b32f6d0430f997a968cf1ad18049a347b
8b39b3c2168eb8e39107e5e049b14dc04ed6fe2020dadef3dc277d842174c496
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/js/above-the-fold.min.js?ver=9.10.0 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:39 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3814
content-type: application/javascript
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/uploads/the7-css/the7-elements-albums-portfolio.css?ver=27dd188f83ee
200 OK 4.3 kB URL HTTP/2 garayvidalabogados.com/wp-content/uploads/the7-css/the7-elements-albums-portfolio.css?ver=27dd188f83ee
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 54be0f7ba04808ad640a9083311bb4c9
910c821e20179be1ddf2a3a892fa9fef88428d99
4fd339d8296edc0b2c97a45bdc4b6c7abc237df77fadca9e20b913001e5c4cad
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/the7-css/the7-elements-albums-portfolio.css?ver=27dd188f83ee HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:18:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4348
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/themes/dt-the7/css/wpbakery.min.css?ver=9.10.0
200 OK 5.2 kB URL HTTP/2 garayvidalabogados.com/wp-content/themes/dt-the7/css/wpbakery.min.css?ver=9.10.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (25435)
Hash 7d37e2a31be9679236148e948973c285
f5978817e74fabf30ef017b77c30d81e019c1c1d
316f35c1bad2dc61c7f909325faa40ac76eaa90e84b3461a59bccb014a7aad8b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/css/wpbakery.min.css?ver=9.10.0 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5235
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/uploads/the7-css/media.css?ver=27dd188f83ee
200 OK 16 kB URL HTTP/2 garayvidalabogados.com/wp-content/uploads/the7-css/media.css?ver=27dd188f83ee
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 0a8268e5c0cbd53599e403b49cb296fc
3d8c1dc74034c5b5fd23daccab092ada3942a6e2
552f1e9fb8ce94a1e73cddc5ff0447410e725f97f05412bf740476dccd633f32
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/the7-css/media.css?ver=27dd188f83ee HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:18:41 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16207
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/themes/dt-the7/lib/custom-scrollbar/custom-scrollbar.min.js?ver=9.10.0
200 OK 16 kB URL HTTP/2 garayvidalabogados.com/wp-content/themes/dt-the7/lib/custom-scrollbar/custom-scrollbar.min.js?ver=9.10.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (31991)
Hash c9359ec9831c4aecc231ea69f0d4724f
156760a3637528482b6dddc6287e180c30b485db
c37d2ce4c6af3e0c8b68af8a65f4614ddec8d3fa5945f73dce0a832e105d8901
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/lib/custom-scrollbar/custom-scrollbar.min.js?ver=9.10.0 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 15645
content-type: application/javascript
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1
409 Conflict 83 B URL HTTP/2 garayvidalabogados.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/plugins/dt-the7-core/assets/css/post-type.min.css?ver=2.5.5.2
200 OK 10 kB URL HTTP/2 garayvidalabogados.com/wp-content/plugins/dt-the7-core/assets/css/post-type.min.css?ver=2.5.5.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (43211)
Hash 4a3cd7782fce5f4dcfced61bfc8aeb8e
ef1c63842bf06d171ed954499459873ccbe41e2a
e7066bb18695bec461c60ad617c742a89f363588787cf1493f1a1636bd66b49f
GET /wp-content/plugins/dt-the7-core/assets/css/post-type.min.css?ver=2.5.5.2 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:17:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9994
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/themes/dt-the7/images/backgrounds/patterns/full/grey_wood.jpg
200 OK 27 kB URL HTTP/2 garayvidalabogados.com/wp-content/themes/dt-the7/images/backgrounds/patterns/full/grey_wood.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 400x400, components 3\012- data
Hash 6022f5029abefa6c4aeb4f56bdf229b9
35b9933c04c96f2c1003bb1f67c1b329ba4d35de
20afa218c6dd76f515fadac448b80bfdd7b5a8fc34903f4d46690d934e63bdd4
GET /wp-content/themes/dt-the7/images/backgrounds/patterns/full/grey_wood.jpg HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wp-content/uploads/the7-css/custom.css?ver=27dd188f83ee
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:38 GMT
accept-ranges: bytes
content-length: 26776
content-type: image/jpeg
date: Thu, 06 Oct 2022 06:01:44 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 06:01:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
garayvidalabogados.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1
409 Conflict 83 B URL HTTP/2 garayvidalabogados.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Thu, 06 Oct 2022 06:01:44 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.ttf?wi57p5
200 OK 48 kB URL HTTP/2 garayvidalabogados.com/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.ttf?wi57p5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, the7-default-font\012- data
Hash 71f9dfd69c5a3adbbb31a994bffb7b36
97fbd02448d6db534ddfe4bcdc3df7ec5d92af9a
e0394e418d7858c3f9fabb6897f4e9364cf86a23a809127690f467ad111f190d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.ttf?wi57p5 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.min.css?ver=9.10.0
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:39 GMT
accept-ranges: bytes
content-length: 48020
content-type: font/ttf
date: Thu, 06 Oct 2022 06:01:44 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 166195d4d3e9e60856a9e4c901fef377
b283e468ef1590c083aa50572f8dadc5bcd34bc6
70add3a2570c923f353eb9bdcfd8fd036e3c540d3c4b3542ae6441d72e5cdc8f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "70ADD3A2570C923F353EB9BDCFD8FD036E3C540D3C4B3542AE6441D72E5CDC8F"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7190
Expires: Thu, 06 Oct 2022 08:01:34 GMT
Date: Thu, 06 Oct 2022 06:01:44 GMT
Connection: keep-alive
s.cliengo.com/weboptimizer/61afd21719bd9f002a2c2bf5/61afd21819bd9f002a2c2bf8.js?platform=wordpress
200 OK 1.7 kB URL HTTP/1.1 s.cliengo.com/weboptimizer/61afd21719bd9f002a2c2bf5/61afd21819bd9f002a2c2bf8.js?platform=wordpress
IP
Hash 5a84e6f0e84739cf1b8f0d7c70a2ecb8
342517d4b81cb1e4f26cf93c6e25e4e8647a918f
67b75b947df91cf0fb4fa7fa364955b0c281a85012da2db47d503b7b665d8961
GET /weboptimizer/61afd21719bd9f002a2c2bf5/61afd21819bd9f002a2c2bf8.js?platform=wordpress HTTP/1.1
Host: s.cliengo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Server: Play! Framework;1.4.5;prod
Content-Type: text/plain; charset=utf-8
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Thu, 06 Oct 2022 06:01:44 GMT
Set-Cookie: PLAY_ERRORS=; Max-Age=0; Expires=Thu, 06 Oct 2022 06:01:44 GMT; Path=/; Domain=.leadaki.com
PLAY_FLASH=; Max-Age=0; Expires=Thu, 06 Oct 2022 06:01:44 GMT; Path=/; Domain=.leadaki.com
ldkInit=1; Max-Age=10000000; Expires=Sun, 29 Jan 2023 23:48:24 GMT; Path=/; Domain=.cliengo.com
PLAY_SESSION=; Max-Age=0; Expires=Thu, 06 Oct 2022 06:01:44 GMT; Path=/; Domain=.leadaki.com
Cache-Control: no-cache
Content-Length: 1680
Via: 1.1 vegur
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12376
Expires: Thu, 06 Oct 2022 09:28:00 GMT
Date: Thu, 06 Oct 2022 06:01:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12376
Expires: Thu, 06 Oct 2022 09:28:00 GMT
Date: Thu, 06 Oct 2022 06:01:44 GMT
Connection: keep-alive
garayvidalabogados.com/wp-content/uploads/the7-css/custom.css?ver=27dd188f83ee
200 OK 51 kB URL HTTP/2 garayvidalabogados.com/wp-content/uploads/the7-css/custom.css?ver=27dd188f83ee
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 75808c7fe3fb54899b533430ad950ae2
8fdf1553bb99fcf339add7af7103d06ca49a6070
8b6d6efe19492523ee72071580420983e1638ecfc5a54e9a9ee6975e62622a07
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/the7-css/custom.css?ver=27dd188f83ee HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:18:41 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12376
Expires: Thu, 06 Oct 2022 09:28:00 GMT
Date: Thu, 06 Oct 2022 06:01:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 1.4 kB IP
ASN #20940 Akamai International B.V.
File type gzip compressed data, max compression\012- data
Hash 7eae564002e37ae333caec5a82f8e9ca
97dfed15024ad8671c7195caf8d7765774f90d21
306686958a08a1aafeefdbb2a9d51855f3a1772b182c37d2260c2d126abb44ff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12376
Expires: Thu, 06 Oct 2022 09:28:00 GMT
Date: Thu, 06 Oct 2022 06:01:44 GMT
Connection: keep-alive
garayvidalabogados.com/wp-content/uploads/the7-css/mega-menu.css?ver=27dd188f83ee
200 OK 8.3 kB URL HTTP/2 garayvidalabogados.com/wp-content/uploads/the7-css/mega-menu.css?ver=27dd188f83ee
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash e0d55d3d36f59877d647b4f4e64c2ec9
e38abfb56e6b2e0802d4cc67af5b2c9d565fe53f
61a477698f080f6113b13a3773f9d7c47564ecbd1868efd1d024f52d7b2088ef
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/the7-css/mega-menu.css?ver=27dd188f83ee HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:18:41 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4129
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff35d320d-221e-46f6-ac6e-9c5b6e8ac6bc.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff35d320d-221e-46f6-ac6e-9c5b6e8ac6bc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 23e10c01392e4958e4a4f19573290da9
59ab1c451c388f7b57da52bf518eff15e0c584ff
ece0b872f33166fcc2816595fdf1348664d985131bc943cd4a543524dede0274
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff35d320d-221e-46f6-ac6e-9c5b6e8ac6bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12752
x-amzn-requestid: 3c32a029-08d0-4f98-a0e0-48a7e05242b4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO6sHXXIAMF-PQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df844-176be5177b67ddc068060b19;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:33:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: nMQQhuMBlGVUc4XeG1S-BJ2_6QQQkcfjctV4xTXW8VENcNE0sVQ1rA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:37:06 GMT
age: 30278
etag: "59ab1c451c388f7b57da52bf518eff15e0c584ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
200 OK 47 kB URL HTTP/2 garayvidalabogados.com/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d4d4c1fcbdd3af27b8000e8792ab46ed
5c9802d34e5cb5b8da808fa2a492f523948ab5d2
273213daef6bdbe98c57101d143a8e8561d782ee55df4c316567ce6dde31a9f1
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:17:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccecc8c9-b6da-4470-b2be-fa8d46df1cc2.webp
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccecc8c9-b6da-4470-b2be-fa8d46df1cc2.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 70ea26af79226e9ff06d6198e2c019dc
ae2c476667f63c7f642f0d9f4d0bc0d846b0ef57
f9393e7b8cbaedc8e1ef87fd89c617cf102f58813d84d866ff68e3124f94d44c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccecc8c9-b6da-4470-b2be-fa8d46df1cc2.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9044
x-amzn-requestid: 127bce04-9f75-4bb1-bbe7-33bf1694d96c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZdZPmHG5oAMFehw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ba263-3896085b3b73ff5403237206;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 03:02:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: E4yZTPRLFdK717YfwjOIFOJDi0wYpyA736dQELeM5iPLvGDXBosEWg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 05:04:17 GMT
age: 3447
etag: "ae2c476667f63c7f642f0d9f4d0bc0d846b0ef57"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a508ac9cd743bec987b2a24454418265
8c7ecefe6908387e2128dc849a6ba857991ba0ab
afb2c2b51f2ce445ada599068901551beee594b15c152ed7551ab7a8835dde6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10809
x-amzn-requestid: db4d1d2a-05b8-403e-a7ca-8b8a6a0a4087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQb-HrTIAMFtNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfab2-74f184406a48e42c0ecc4ec9;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: tv80OXQUu13gDuuFESnEnXMuFdNBmGc1y592euL7QnfZW5PwJym9-g==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:53:39 GMT
etag: "8c7ecefe6908387e2128dc849a6ba857991ba0ab"
content-type: image/jpeg
age: 29285
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/themes/dt-the7/css/main.min.css?ver=9.10.0
200 OK 76 kB URL HTTP/2 garayvidalabogados.com/wp-content/themes/dt-the7/css/main.min.css?ver=9.10.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 32f03027e3211abf7eabeb77ecc25062
f2b936a5fdcbb7e808bd22ee12f9b8982cbea8c2
1e9a46262cc799ab3f40bce56dacbe6dc88c8cd76de2410d6b73958c085d0133
GET /wp-content/themes/dt-the7/css/main.min.css?ver=9.10.0 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:39 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
lw.cliengo.com/mainclgo.bundle.js
200 OK 60 kB URL HTTP/2 lw.cliengo.com/mainclgo.bundle.js
IP
File type Unicode text, UTF-8 text, with very long lines (17810), with no line terminators
Hash bbe2fa4775c07e32b90eed84274286c1
c6319cfd95b9dd6e7aa261a3f05ef70da8622fe2
8972607ae2b35c11de3955406dc57588c2f30175b7e3d22b4d27073bcb597863
GET /mainclgo.bundle.js HTTP/1.1
Host: lw.cliengo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 06:01:45 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31557600
cf-bgj: minify
etag: W/"4596-18360c50848"
last-modified: Wed, 21 Sep 2022 15:57:49 GMT
vary: Accept-Encoding
via: 1.1 vegur
x-powered-by: Express
cf-cache-status: HIT
age: 1260004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bzJD6L7k1yp4LBJ6suU2gFchcSdiOQw5z71OeLs3cxS7zZL3RrPt5T2LtmFS1Aj%2FjaiJqBZZhCU6Znx5i3%2FmFvBeLZMVsTEbGzyO%2BsohKxnGuYz%2BqqZCrRsoYf8Do918"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 755c2f285e52b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
res.cloudinary.com/hbrrdozyj/image/upload/v1603736815/Usamos-Cliengo_knac91.png
200 OK 701 B URL HTTP/2 res.cloudinary.com/hbrrdozyj/image/upload/v1603736815/Usamos-Cliengo_knac91.png
IP
File type PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 242264fbeaa3ea5ea2646a052e31b51f
0d03bd83d1abd234cf2d1fa9ef074cde1b2feef5
856b12d7676ac78cdb0727e58eb586a1449a431a93f5496f79c068a1135305d9
GET /hbrrdozyj/image/upload/v1603736815/Usamos-Cliengo_knac91.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lw.cliengo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
etag: "242264fbeaa3ea5ea2646a052e31b51f"
last-modified: Mon, 26 Oct 2020 18:26:56 GMT
date: Thu, 06 Oct 2022 06:01:45 GMT
strict-transport-security: max-age=604800
cache-control: public, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=1;start=2022-10-06T06:01:45.271Z;desc=hit,rtt;dur=9
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,ETag,Server-Timing,X-Content-Type-Options
content-length: 701
X-Firefox-Spdy: h2
lw.cliengo.com/s/companyid/socket-io.js
200 OK 20 kB URL HTTP/2 lw.cliengo.com/s/companyid/socket-io.js
IP
File type ASCII text, with very long lines (49159)
Hash bfea2ef98bff13f719ae518dafb94ca0
515d566195b53b5ba42a8ba4a26f199afd516d84
0d81845c877fbf898b0d6f8df0a9a519096d1ada983c98e02496e0bafcc01533
GET /s/companyid/socket-io.js HTTP/1.1
Host: lw.cliengo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lw.cliengo.com/s/61afd21719bd9f002a2c2bf5/61afd21819bd9f002a2c2bf8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 06:01:45 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31557600
cf-bgj: minify
cf-polished: origSize=62426
etag: W/"f3da-18360c35e80"
last-modified: Wed, 21 Sep 2022 15:56:00 GMT
vary: Accept-Encoding
via: 1.1 vegur
x-powered-by: Express
cf-cache-status: HIT
age: 1258028
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SkpWXJSN%2FqO4qF8SEmHYVdQnCYIZ7DBn5h9mvm4v4sgTzTWja1MhNRbxyIWKNyqT2xtO7AHxDIjb2DQJqu9mEaLKTjIZCePd4%2FUXIOkuP6ae4cxK6nEdbK0oA940tJ59"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 755c2f29af7db51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
wb.cliengo.com/dist/js/mainWsp.js
200 OK 24 kB URL HTTP/2 wb.cliengo.com/dist/js/mainWsp.js
IP
File type ASCII text, with very long lines (11914), with no line terminators
Hash c6f34ea9c1c068ace34400683a167949
f3721a4abe1310e2c002ff163b6521ffd6035e51
5f61c7f3a79ba9de29903ad2ec632ada453ffab41baa3f31f68db076a0eddf24
GET /dist/js/mainWsp.js HTTP/1.1
Host: wb.cliengo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 06:01:45 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31557600
cf-bgj: minify
cf-polished: origSize=11950
etag: W/"2eae-18360732418"
last-modified: Wed, 21 Sep 2022 14:28:22 GMT
vary: Accept-Encoding
via: 1.1 vegur
x-powered-by: Express
cf-cache-status: HIT
age: 1256459
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E1m18uM9PI63FGsAYQpmtosHkO%2FkkeGsXvIEPawZATVQTn5nGYjKgmDhEmonhRNffu%2BJ9cL9uZbcFlvql9dal%2BIL2uIQ%2BW3abj1f%2FLXl9fwVvm50yCY7RxslzCwT1d2c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 755c2f287e6ab51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f763a685d14b05b6ced9792151da30b8
b25be5359245be857ffa1bddcb197cb771a36a45
505ad6dc6417d58207f0d68862c4423f4611660ccc6afe165fd3ec2ccb1c893d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 06:01:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j98&a=577753233&t=pageview&_s=1&dl=https%3A%2F%2Fgarayvidalabogados.com%2Fwjcxnu49.zip&dp=%2Fcliente%2F61afd21719bd9f002a2c2bf5%2Fsiteless%2F61afd21819bd9f002a2c2bf8%2Fhttps%253A%252F%252Fgarayvidalabogados.com%252Fwjcxnu49.zip&ul=en-us&de=UTF-8&dt=P%C3%A1gina%20no%20encontrada%20%E2%80%93%20Garay%20Vidal%20Abogados&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAEABAAAAACAAI~&jid=847581925&gjid=1747959477&cid=680623874.1665021695&tid=UA-28791515-1&_gid=366993511.1665021695&_r=1&_slc=1&cd1=Pilar_1.0&cd2=Web_2.0&cd3=Camila&cd4=Asesor%C3%ADa%20Online&cd5=5&cd6=%23ffb00b&cd7=whatsAppActive%2Conline_now&cd8=emptystate_leads&cd9=CLIENGO_FREE&cd10=Not%20set&cd12=61afd21719bd9f002a2c2bf5&cd13=61afd21819bd9f002a2c2bf8&cd14=TWO_CHATS&cd15=BAR&z=171449970
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=577753233&t=pageview&_s=1&dl=https%3A%2F%2Fgarayvidalabogados.com%2Fwjcxnu49.zip&dp=%2Fcliente%2F61afd21719bd9f002a2c2bf5%2Fsiteless%2F61afd21819bd9f002a2c2bf8%2Fhttps%253A%252F%252Fgarayvidalabogados.com%252Fwjcxnu49.zip&ul=en-us&de=UTF-8&dt=P%C3%A1gina%20no%20encontrada%20%E2%80%93%20Garay%20Vidal%20Abogados&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAEABAAAAACAAI~&jid=847581925&gjid=1747959477&cid=680623874.1665021695&tid=UA-28791515-1&_gid=366993511.1665021695&_r=1&_slc=1&cd1=Pilar_1.0&cd2=Web_2.0&cd3=Camila&cd4=Asesor%C3%ADa%20Online&cd5=5&cd6=%23ffb00b&cd7=whatsAppActive%2Conline_now&cd8=emptystate_leads&cd9=CLIENGO_FREE&cd10=Not%20set&cd12=61afd21719bd9f002a2c2bf5&cd13=61afd21819bd9f002a2c2bf8&cd14=TWO_CHATS&cd15=BAR&z=171449970
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j98&a=577753233&t=pageview&_s=1&dl=https%3A%2F%2Fgarayvidalabogados.com%2Fwjcxnu49.zip&dp=%2Fcliente%2F61afd21719bd9f002a2c2bf5%2Fsiteless%2F61afd21819bd9f002a2c2bf8%2Fhttps%253A%252F%252Fgarayvidalabogados.com%252Fwjcxnu49.zip&ul=en-us&de=UTF-8&dt=P%C3%A1gina%20no%20encontrada%20%E2%80%93%20Garay%20Vidal%20Abogados&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAEABAAAAACAAI~&jid=847581925&gjid=1747959477&cid=680623874.1665021695&tid=UA-28791515-1&_gid=366993511.1665021695&_r=1&_slc=1&cd1=Pilar_1.0&cd2=Web_2.0&cd3=Camila&cd4=Asesor%C3%ADa%20Online&cd5=5&cd6=%23ffb00b&cd7=whatsAppActive%2Conline_now&cd8=emptystate_leads&cd9=CLIENGO_FREE&cd10=Not%20set&cd12=61afd21719bd9f002a2c2bf5&cd13=61afd21819bd9f002a2c2bf8&cd14=TWO_CHATS&cd15=BAR&z=171449970 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://garayvidalabogados.com
Connection: keep-alive
Referer: https://garayvidalabogados.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://garayvidalabogados.com
date: Thu, 06 Oct 2022 06:01:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
res.cloudinary.com/hbrrdozyj/image/upload/q_auto,f_auto/v1595518710/whatsapp-logo_z5tahe.svg
200 OK 624 B URL HTTP/2 res.cloudinary.com/hbrrdozyj/image/upload/q_auto,f_auto/v1595518710/whatsapp-logo_z5tahe.svg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c04765e00838f288288e09ce8798cd27
dcf3eabf51352b6d426ffbcdb7db15acb003206f
6170441b96aa20da803502e7415190bb71e9c4fb8d5973dd8ea8631ebf122ab3
GET /hbrrdozyj/image/upload/q_auto,f_auto/v1595518710/whatsapp-logo_z5tahe.svg HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wb.cliengo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="whatsapp-logo_z5tahe.webp"
content-type: image/webp
etag: "c04765e00838f288288e09ce8798cd27"
last-modified: Thu, 06 Aug 2020 14:28:25 GMT
date: Thu, 06 Oct 2022 06:01:45 GMT
vary: Save-Data
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=1;start=2022-10-06T06:01:45.506Z;desc=hit,rtt;dur=9
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 624
X-Firefox-Spdy: h2
wb.cliengo.com/dist/css/button.css
200 OK 6.9 kB URL HTTP/2 wb.cliengo.com/dist/css/button.css
IP
File type ASCII text, with very long lines (32301), with no line terminators
Hash a134f5e785b3ec5224508d422202ab46
b6cccdebbc8414c1c534b431f2d6191862fcf9cf
4605eb66aeee867d0a36e817527b8ce68ad434da50172420c2ada2b5f7ff3e0d
GET /dist/css/button.css HTTP/1.1
Host: wb.cliengo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wb.cliengo.com/iframe.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 06:01:45 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31557600
cf-bgj: minify
cf-polished: origSize=32727
etag: W/"7fd7-18360732418"
last-modified: Wed, 21 Sep 2022 14:28:22 GMT
vary: Accept-Encoding
via: 1.1 vegur
x-powered-by: Express
cf-cache-status: HIT
age: 1256458
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=idwU5GEGgHJQ4PLSgWgctV3u8AKqbRJmNpqQG%2Fy52Wpt5Kl0yoHLJc6p3XjuiC2rDXo%2FmNAaxL8Lu44Yhw90G0p1NGYT9THNiWg7RHvOLOOC27SnRkDsYoQVlCcM6kso"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 755c2f2ae8b7b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81c5ea9aaea192222ef31530871928b8
0156da4bb81cfa6e5444641b9356c1deed6e5279
adb1f287921f906b19f38fd485e23cbb77f192ab361ac141b0682c88b743f969
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ADB1F287921F906B19F38FD485E23CBB77F192AB361AC141B0682C88B743F969"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7159
Expires: Thu, 06 Oct 2022 08:01:04 GMT
Date: Thu, 06 Oct 2022 06:01:45 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eac86f868b3967f1946c7f5fc712b25f
e2ae8eb09715a0af0791c085eb35bf66e0548e30
bceb14e7a478c0e34a0f1d8286eb954566c62051e996bc36189de922a76a6e06
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 06:01:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-28791515-1&cid=680623874.1665021695&jid=847581925&gjid=1747959477&_gid=366993511.1665021695&_u=QACAAEAAAAAAACAAI~&z=1144584555
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-28791515-1&cid=680623874.1665021695&jid=847581925&gjid=1747959477&_gid=366993511.1665021695&_u=QACAAEAAAAAAACAAI~&z=1144584555
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-28791515-1&cid=680623874.1665021695&jid=847581925&gjid=1747959477&_gid=366993511.1665021695&_u=QACAAEAAAAAAACAAI~&z=1144584555 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://garayvidalabogados.com
Connection: keep-alive
Referer: https://garayvidalabogados.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://garayvidalabogados.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 06 Oct 2022 06:01:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
socketeer.cliengo.com/socket.io/?EIO=3&transport=websocket
101 Switching Protocols 0 B URL HTTP/1.1 socketeer.cliengo.com/socket.io/?EIO=3&transport=websocket
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: socketeer.cliengo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://lw.cliengo.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: eeZNr3v6R/b/rjZkzRCY3w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-Websocket-Accept: ABjjY4eFYYqfPzcbwefeD8EQDFo=
Sec-Websocket-Extensions: permessage-deflate
Via: 1.1 vegur
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eac86f868b3967f1946c7f5fc712b25f
e2ae8eb09715a0af0791c085eb35bf66e0548e30
bceb14e7a478c0e34a0f1d8286eb954566c62051e996bc36189de922a76a6e06
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 06:01:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d4c3917173bd92c4b3208cdf2c7c345
726a9aa16eef5844afde825f9faf1b505d31e69b
572eebfaf735eb8aa1b3563d0317d52f5d22e9e83e5f5b6723f65da83fb15f22
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 06:01:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 40a4de06678d96242b71d5318f2fd4ef
546a7d1d92df81916f14155943427b5453ae3924
aed9af25ae57c181702a137d48cb00f5b30297180161451de3b628359dc9ec6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 06:01:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-28791515-1&cid=680623874.1665021695&jid=847581925&_u=QACAAEAAAAAAACAAI~&z=418872878
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-28791515-1&cid=680623874.1665021695&jid=847581925&_u=QACAAEAAAAAAACAAI~&z=418872878
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-28791515-1&cid=680623874.1665021695&jid=847581925&_u=QACAAEAAAAAAACAAI~&z=418872878 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 06:01:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-28791515-1&cid=680623874.1665021695&jid=847581925&_u=QACAAEAAAAAAACAAI~&z=418872878
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-28791515-1&cid=680623874.1665021695&jid=847581925&_u=QACAAEAAAAAAACAAI~&z=418872878
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-28791515-1&cid=680623874.1665021695&jid=847581925&_u=QACAAEAAAAAAACAAI~&z=418872878 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 06:01:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d4c3917173bd92c4b3208cdf2c7c345
726a9aa16eef5844afde825f9faf1b505d31e69b
572eebfaf735eb8aa1b3563d0317d52f5d22e9e83e5f5b6723f65da83fb15f22
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 06:01:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f9371f81e2eeeead7fe351a49f3b1c40
ae23d6c6c57dd7cf568c3a74594c377b7bb7df43
03c4ba0faa3199d061d1bb37df5d48ba6d81f77a83e243922075efc4d4acf456
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 06:01:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.icomoon.io/public/2f34c7d7b1/cliengowidget/icomoon.woff2?99daqt
200 OK 3.2 kB URL HTTP/2 i.icomoon.io/public/2f34c7d7b1/cliengowidget/icomoon.woff2?99daqt
IP
File type Web Open Font Format (Version 2), TrueType, length 3176, version 1.0\012- data
Hash 37283b3bc681c5c9b0d4b86fc827dc05
2c79d587c510f92a830f8d9c55594e9c2439af8e
be8bc2354ca787b21054bcc15885340168531ff30a85a41d11d7220e82356a80
GET /public/2f34c7d7b1/cliengowidget/icomoon.woff2?99daqt HTTP/1.1
Host: i.icomoon.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lw.cliengo.com
Connection: keep-alive
Referer: https://i.icomoon.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 06:01:46 GMT
content-type: font/woff2
content-length: 3176
last-modified: Thu, 30 Dec 2021 16:28:10 GMT
etag: "61cdde1a-c68"
cache-control: no-cache
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.4
200 OK 0 B URL HTTP/2 garayvidalabogados.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.4 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.5
200 OK 0 B URL HTTP/2 garayvidalabogados.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.5 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
wb.cliengo.com/iframe.html
200 OK 0 B URL HTTP/2 wb.cliengo.com/iframe.html
IP
GET /iframe.html HTTP/1.1
Host: wb.cliengo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 06:01:45 GMT
content-type: text/html; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31557600
last-modified: Tue, 18 Jan 2022 14:21:00 GMT
vary: Accept-Encoding
via: 1.1 vegur
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l1DJgFHtbYXs5LK8%2Bqvayk5LWgM0Zt4g87NjwFTVt2XL%2FwXjOYFjRhQi2jViJHEzzrPdZHZNfftnwcw%2FMSOshpaB3n9%2FS1J2ITsYpEnauBOq%2BYn23M%2F2%2FYXG4KyEOgdQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 755c2f28ae94b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
lw.cliengo.com/s/61afd21719bd9f002a2c2bf5/61afd21819bd9f002a2c2bf8
200 OK 0 B URL HTTP/2 lw.cliengo.com/s/61afd21719bd9f002a2c2bf5/61afd21819bd9f002a2c2bf8
IP
GET /s/61afd21719bd9f002a2c2bf5/61afd21819bd9f002a2c2bf8 HTTP/1.1
Host: lw.cliengo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 06:01:45 GMT
content-type: text/html; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=31557600
last-modified: Wed, 21 Sep 2022 15:56:00 GMT
vary: Accept-Encoding
via: 1.1 vegur
cf-cache-status: HIT
age: 14410
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yAFXYSxG1QpTLHvxnl%2B0R3vwHXPfLR%2Bdt4sYurCvLU8Sm4C%2FNMTbnEWqUbIwegoXn%2BC4cnKFw1godOCEA3QyKgT6Maazzz4Eu%2BUjMbtwd72mpI06vlDQJ9m7BIpT%2BEOf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 755c2f288e86b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4
200 OK 0 B URL HTTP/2 garayvidalabogados.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:17:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
lw.cliengo.com/widget.css
200 OK 0 B URL HTTP/2 lw.cliengo.com/widget.css
IP
GET /widget.css HTTP/1.1
Host: lw.cliengo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lw.cliengo.com/s/61afd21719bd9f002a2c2bf5/61afd21819bd9f002a2c2bf8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 06:01:45 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31557600
cf-bgj: minify
cf-polished: origSize=32991
etag: W/"80df-18360c50848"
last-modified: Wed, 21 Sep 2022 15:57:49 GMT
vary: Accept-Encoding
via: 1.1 vegur
x-powered-by: Express
cf-cache-status: HIT
age: 1260002
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yImF0wbYISxllIktNNG%2FCBzEPOgzrvLjpjHytWO6qlIPUYDoVYWQewe%2FnsDAGATQPV2w%2FNIlhuxUnYk%2Fcmcldqoo%2FlhlFIw4R0k1Jp38Hr1PPqjCBoZy9lxXASVWCd%2B2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 755c2f28ceb9b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
garayvidalabogados.com/wp-content/themes/dt-the7/js/main.min.js?ver=9.10.0
200 OK 0 B URL HTTP/2 garayvidalabogados.com/wp-content/themes/dt-the7/js/main.min.js?ver=9.10.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/js/main.min.js?ver=9.10.0 HTTP/1.1
Host: garayvidalabogados.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://garayvidalabogados.com/wjcxnu49.zip
Cookie: _ga=GA1.2.680623874.1665021695; _gid=GA1.2.366993511.1665021695
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Jul 2021 22:16:39 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 06 Oct 2022 06:01:43 GMT
server: Apache
X-Firefox-Spdy: h2
108.167.165.249
93.184.220.29
151.101.85.137
23.36.77.32
0.0.0.0