| detectportal.firefox.com/success.txt?ipv4 |  34.107.221.82 | 200 OK | 8 B |
URL HTTP/1.1detectportal.firefox.com/success.txt?ipv4 IP34.107.221.82:0
Hashae780585f49b94ce1444eb7d28906123 7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86 81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Mon, 30 Jan 2023 17:36:21 GMT
Age: 75543
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashcc987a1e19994b4f4f2b7831650797e3 b77e8942b6a11ae4e6095fd45198d5cb21f1fcab fe8ff518fa3d940565afc53dde20fdd0ac3ee7f8337d795daf3a6cfc2957b153
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE8FF518FA3D940565AFC53DDE20FDD0AC3EE7F8337D795DAF3A6CFC2957B153"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8145
Expires: Tue, 31 Jan 2023 16:51:10 GMT
Date: Tue, 31 Jan 2023 14:35:25 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash5eb7c9bc996a0ff420e58af45526f053 8c2614832b8efe1c9da0bbd465d6f3f172d95a9e c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2457
Expires: Tue, 31 Jan 2023 15:16:22 GMT
Date: Tue, 31 Jan 2023 14:35:25 GMT
Connection: keep-alive
|
|
| getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 | 34.120.5.221 | 200 OK | 46 kB |
URL HTTP/2getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 IP34.120.5.221:0
File typeJSON data\012- , ASCII text, with very long lines (65536), with no line terminators Hasha48db5f3235e8f9c762cdaa749112b47 911498c33044072ae4c1ef859f070f8a39563071 0a29dffb3ac6bc0536ec8b7d4f751fddc7acbdce19cff00f9eff5742a5b3dfef
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Hit from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: aIv5HJXk0G0Wa46iqLNktJ8e7GKT-S2R_IVn6vMrDN7L5cdfJQK5jQ==
content-encoding: gzip
via: 1.1 2a44ef7b9d28e74c78ffadeedcbb887c.cloudfront.net (CloudFront), 1.1 google
content-length: 45706
date: Tue, 31 Jan 2023 14:20:35 GMT
age: 890
content-type: application/json
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash09ee4b0fe6cf4ca5ed31b24452338d00 7e62b6e20f0d4737f4a8d94f9818a0883027839e 56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13074
Expires: Tue, 31 Jan 2023 18:13:19 GMT
Date: Tue, 31 Jan 2023 14:35:25 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: kP9MadOFDyy/TaaOhTyzJNtSz193ZsFa8pdhs7cAoprxTsQDxFSPwrG0oEodr+ga5UK6vMnJ3BY=
x-amz-request-id: AVPRXWWEWSZ1FY3W
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 13:58:32 GMT
age: 2213
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash0c35c3ec659d3a26ea97e68d787bb043 d97e3672244efec5b7814f2d8a734cd1a9387854 4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4110
Expires: Tue, 31 Jan 2023 15:43:55 GMT
Date: Tue, 31 Jan 2023 14:35:25 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashdcd75ca6daca51c5e39d431468511793 07f76d3bf23d65c9110d810fa71a994e39e085d3 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 13:43:17 GMT
content-type: application/json
age: 3128
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 14:35:25 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashbf2eb149b4b03df03d916e1a625fbe5f 733715c487395f22814091023ce7f9bd86107623 6f41f0cc19a8a6fb60da13bfd39ccb7e13402e825fa6c55c8f5639cf18284c4c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6458
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 14:35:25 GMT
Last-Modified: Tue, 31 Jan 2023 12:47:47 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 13:49:04 GMT
age: 2781
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash22b9916fc1fafc9bdc9bb37f9eac8a9a 86f640e134a741a0f906a8e3a0f5c6659dd0e394 a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2622
Expires: Tue, 31 Jan 2023 15:19:08 GMT
Date: Tue, 31 Jan 2023 14:35:26 GMT
Connection: keep-alive
|
|
| shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2 | 44.236.61.188 | 200 OK | 8 B |
URL HTTP/1.1shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2 IP44.236.61.188:0
Hash29fc57841962e407cb50c1be60284bf7 ce968a77e2996da5eee8925182318f171ccdce47 ae7e7075247dcfad763f1e131aeac3d2e756bb03d48b0d315a50c69636e5dc8b
POST /downloads?client=Firefox&appver=96.0a&pver=2.2 HTTP/1.1
Host: shavar.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 773
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Date: Tue, 31 Jan 2023 14:35:26 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Length: 8
Connection: Close
|
|
| brenderlawfirm.com/crcgroup | 199.250.206.218 | 404 Not Found | 149 kB |
URL HTTP/1.1brenderlawfirm.com/crcgroup IP199.250.206.218:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (9381) Size149 kB (149081 bytes) Hash7e63a9664b864ee12d06be23b2a8963e 21eed8fbad65adb30760fec6ef6362617b0cc7ff e4c74609699abf62c72f808f2b6e2f80ebe6c91b5c8c8f8163dadfa013c050fa
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /crcgroup HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 14:35:25 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://brenderlawfirm.com/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| brenderlawfirm.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.3 | 199.250.206.218 | 200 OK | 2.8 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.3 IP199.250.206.218:0
Hash443a0083792b1ca61e8116184cb5901e 03c1b038741f1e9e75d3d7b006d6e3b2744e0b85 9a38595d63dfae35b88183515b69f8b742128b564b9ea4dbd79908c3aa73921a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.3 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Thu, 26 Jan 2023 12:29:20 GMT
ETag: "af3-5f329e5eb852d"
Accept-Ranges: bytes
Content-Length: 2803
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| push.services.mozilla.com/ | 54.186.71.207 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.186.71.207:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: beHJqORFpKokG5t2RS6m4Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 07CebUeVL0p7rD4RLeU/H32aNB4=
|
|
| brenderlawfirm.com/wp-includes/css/classic-themes.min.css?ver=1 | 199.250.206.218 | 200 OK | 217 B |
URL HTTP/1.1brenderlawfirm.com/wp-includes/css/classic-themes.min.css?ver=1 IP199.250.206.218:0
Hash95e891f28e44a9b314c09545d86be2b7 f9b13a8bd47273b086a0a07df15f314e0af0bc3e 5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Thu, 29 Dec 2022 11:14:19 GMT
ETag: "d9-5f0f5961278c0"
Accept-Ranges: bytes
Content-Length: 217
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hasha5ff07b9b81cdf319f4a57d8d6dbbd6d 736ae15d0ed2068580d35a7cff8b33c0ec87af52 24406eda914ef8f78e1f60d6b54237ea6311f2fdf54b2b63647d84b397b41de0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 14:35:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| brenderlawfirm.com/wp-content/plugins/bdthemes-element-pack-lite/assets/css/element-pack-site.css?ver=2.10.1 | 199.250.206.218 | 200 OK | 26 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/bdthemes-element-pack-lite/assets/css/element-pack-site.css?ver=2.10.1 IP199.250.206.218:0
File typeASCII text, with very long lines (25950), with no line terminators Hash1f9ab00f62b50eb7f8a119ab73e198a9 3d32c2b2c050adf377789e932b597e840ae595df dbe223bec177898f500d97bf74a3b222b2a094b7039a03442ea927f92536e279
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/bdthemes-element-pack-lite/assets/css/element-pack-site.css?ver=2.10.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Fri, 30 Apr 2021 11:11:52 GMT
ETag: "655e-5c12eadcb6e00"
Accept-Ranges: bytes
Content-Length: 25950
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/magnific-popup.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 7.0 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/magnific-popup.css?ver=6.1.1 IP199.250.206.218:0
Hash30b593b71d7672658f89bfea0ab360c9 d6963db6faa9294387bb3175813a61bc3f859437 45d1f5f6cf913746c45dd697b1a8f3b719c02d8b3f678dc7fc2766d54e1aaf6e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/css/magnific-popup.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "1b27-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 6951
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| maps.google.com/maps/api/js?key=AIzaSyBwId115O5TBiorsB6u6f4A62_HP4amw8M&libraries=geometry%2Cplaces%2Cweather%2Cpanoramio%2Cdrawing&language=en&ver=6.1.1 | 142.250.74.142 | 200 OK | 59 kB |
URL HTTP/2maps.google.com/maps/api/js?key=AIzaSyBwId115O5TBiorsB6u6f4A62_HP4amw8M&libraries=geometry%2Cplaces%2Cweather%2Cpanoramio%2Cdrawing&language=en&ver=6.1.1 IP142.250.74.142:0
File typeASCII text, with very long lines (2397) Hash713b58c5a1ebd4ba25a553c4367c1b5c 68e213907ec839bb5fadfdde4815a55b92d93cfa d734ac20f06c785b65e0496db15f2c462aaa7205b4a94dfb75d03390aaefc1a7
GET /maps/api/js?key=AIzaSyBwId115O5TBiorsB6u6f4A62_HP4amw8M&libraries=geometry%2Cplaces%2Cweather%2Cpanoramio%2Cdrawing&language=en&ver=6.1.1 HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brenderlawfirm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Tue, 31 Jan 2023 14:35:26 GMT
expires: Tue, 31 Jan 2023 15:05:26 GMT
cache-control: public, max-age=1800
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 58688
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=39
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| brenderlawfirm.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 | 199.250.206.218 | 200 OK | 19 kB |
URL HTTP/1.1brenderlawfirm.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 IP199.250.206.218:0
File typeASCII text, with very long lines (15660) Hash32beb68a374e3aeac00abdf9e12b84ea b5d18aa625e8696dd9d07cd0869337717b211ae0 5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Tue, 24 May 2022 22:28:39 GMT
ETag: "48b9-5dfc97a6df3c0"
Accept-Ranges: bytes
Content-Length: 18617
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashbe86cc124994d9b171b9c6f534f0d65e 2dcefbc156bb5e1e0c7268537d2f0901f338823b 984efeeb1af689799055abad096b93348a2d4bb189eed70fe84b8fb21f628a1a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2206
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 14:35:26 GMT
Last-Modified: Tue, 31 Jan 2023 13:58:40 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash0dea93a9adb1e26a6ebfaf2e12c22cd5 e286810b718e374858f11adf0aae18dc65f27d66 73dafa5cd629cdf850ca05894932507c209713024ef27ce7597cb25365f2150e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 14:35:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.datatables.net/1.10.20/css/jquery.dataTables.min.css?ver=6.1.1 | 172.67.14.139 | 200 OK | 2.1 kB |
URL HTTP/2cdn.datatables.net/1.10.20/css/jquery.dataTables.min.css?ver=6.1.1 IP172.67.14.139:0
File typeASCII text, with very long lines (13899) Hashf1c730cb36b02ff6f5f79035d08514d2 3cf50dcd231f50143037d15c2d26d6a3ef2ce428 2c4bdf8fbeadffec85b8aee8f45d5942836a04ea6b1c5ede435db7f607379f24
GET /1.10.20/css/jquery.dataTables.min.css?ver=6.1.1 HTTP/1.1
Host: cdn.datatables.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brenderlawfirm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 14:35:26 GMT
content-type: text/css; charset=utf-8
content-length: 2109
x-frame-options: SAMEORIGIN
last-modified: Fri, 11 Nov 2022 14:46:27 GMT
etag: "1120a3c-364c-5ed32f45a88d0-gzip"
cache-control: max-age=31536000
expires: Wed, 15 Nov 2023 21:45:44 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: origin, x-requested-with, content-type
access-control-allow-methods: GET
cf-cache-status: HIT
age: 6626981
accept-ranges: bytes
server: cloudflare
cf-ray: 79232c82fa27b4ee-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash0dea93a9adb1e26a6ebfaf2e12c22cd5 e286810b718e374858f11adf0aae18dc65f27d66 73dafa5cd629cdf850ca05894932507c209713024ef27ce7597cb25365f2150e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 14:35:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/bootstrap.min.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 154 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/bootstrap.min.css?ver=6.1.1 IP199.250.206.218:0
File typeASCII text, with very long lines (65324) Size154 kB (153560 bytes) Hash440197f302c513d42e8defc8e2ddfee3 ac217ab346c227688496b2747e9802e1d4b60a09 bd3744b86df31aee042a53fd9d441f3d5da5005e591f495507525245e9831ea0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/css/bootstrap.min.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "257d8-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 153560
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/slick.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 1.8 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/slick.css?ver=6.1.1 IP199.250.206.218:0
Hashf38b2db10e01b1572732a3191d538707 a94a059b3178b4adec09e3281ace2819a30095a4 de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/css/slick.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "6f0-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 1776
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/slick-theme.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 3.1 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/slick-theme.css?ver=6.1.1 IP199.250.206.218:0
Hashf9faba678c4d6dcfdde69e5b11b37a2e 81a434f94f2b1124f3232bb86f2944f82fb23ac0 7adaf08052c6a6a0f8a0d0055b4f191fd07389fe41c972b69573472b2ecb406a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/css/slick-theme.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "c49-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 3145
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221675170498175%22 | 35.241.9.150 | 200 OK | 21 kB |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221675170498175%22 IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (20973), with no line terminators Hash5fb0bd2f6277715894ce2c0301e94384 64a547054d536fc5cf16802a89b7cca04e86363b 89fa1ee6eb8acc9e1501a8fc0e8e54a142ad0110e50b65f3f1edcf3e20a14b3e
GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221675170498175%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 20973
via: 1.1 google
date: Tue, 31 Jan 2023 14:12:14 GMT
age: 1392
last-modified: Tue, 31 Jan 2023 13:08:18 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1675168644673&_since=%221666204638208%22 | 35.241.9.150 | 200 OK | 26 kB |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1675168644673&_since=%221666204638208%22 IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (26525), with no line terminators Hash1c759d21fc09983412f32e3ac3cf5089 327570f77da8ecb859749507fe372092132c5cc0 1f00562beb1edc7ed714fb19a768304447596dab32fb06286b4555d1174d8c84
GET /v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1675168644673&_since=%221666204638208%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 26525
via: 1.1 google
date: Tue, 31 Jan 2023 13:45:26 GMT
age: 3000
last-modified: Tue, 31 Jan 2023 12:37:24 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hashe76071a28ee566dababb3834f46d68ed aebb4e68c1ba2de0f90025283e8ed8470944fde0 78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Eyd04LU8VUuUaHUCQK65JH7G/o0zfivz3MIAEpztzl9dhTGjo2VgXEoVSwaL+8sFhLMSJdBh/04=
x-amz-request-id: QFN86Y0PTQPD2YM2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 14:32:37 GMT
age: 169
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| brenderlawfirm.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 95 kB |
URL HTTP/1.1brenderlawfirm.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 IP199.250.206.218:0
File typeASCII text, with very long lines (47826) Hash71d925864153f0edf91037f3d31048e8 cc16a0524ac63b5ce29f703a66412224f0dd771a c324ef26b20264369e4568dc9ef1c5cb1f325f6bc4e8b7c01f7fe93fa353276a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Thu, 29 Dec 2022 11:14:20 GMT
ETag: "172a9-5f0f59621bb00"
Accept-Ranges: bytes
Content-Length: 94889
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/fontawesome.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 68 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/fontawesome.css?ver=6.1.1 IP199.250.206.218:0
Hash94fdd70a7355a108497f314fe675e71c 21e71256bc2c73b966f4a99fdeef114effd23837 e91aa7bb145308584d79a7de506f5cb10c7b1f9a6be167c7921150b632a5b971
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/css/fontawesome.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "10b59-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 68441
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/plugins/bdthemes-element-pack-lite/assets/css/bdt-uikit.css?ver=3.2 | 199.250.206.218 | 200 OK | 94 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/bdthemes-element-pack-lite/assets/css/bdt-uikit.css?ver=3.2 IP199.250.206.218:0
File typeUnicode text, UTF-8 text, with very long lines (65534), with no line terminators Hash213394e64fb5d5f3e9121a3d93222c38 cf7ff221811d67d2796412886f95e660b9359604 92e90826ee5763cfe3837b1d0e2260e913a1c977e3d029d40537fa15ff79a564
GET /wp-content/plugins/bdthemes-element-pack-lite/assets/css/bdt-uikit.css?ver=3.2 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Fri, 30 Apr 2021 11:11:52 GMT
ETag: "16d37-5c12eadcb6e00"
Accept-Ranges: bytes
Content-Length: 93495
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/jquery.flipster.min.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 12 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/jquery.flipster.min.css?ver=6.1.1 IP199.250.206.218:0
File typeASCII text, with very long lines (11602), with no line terminators Hashb198297d9b82acc0bb88c1d53cf8d5c6 cb0e0779ff73540de291ab085dabaa0cdd98d66d f96a3edfec408891b1f1594665747cf61c31022cfaee3ad4ac786a8d40ebaf78
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/css/jquery.flipster.min.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "2d52-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 11602
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/brands.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 713 B |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/brands.css?ver=6.1.1 IP199.250.206.218:0
File typeASCII text, with very long lines (312) Hasha0fb612a67a875d2ea809d11011e38e9 22a9eab7886d92c8277403fc825b1e5af674ba41 781d5fd598d81afa041956c1e56f1df3e9772e3041009423a6dbf4e07fa6d416
GET /wp-content/plugins/rs_addons/prelements/assets/css/brands.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "2c9-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 713
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/solid.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 725 B |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/solid.css?ver=6.1.1 IP199.250.206.218:0
File typeASCII text, with very long lines (307) Hash41c227b985f4d8ce98f706d0bea979ec 082750e3f439e05a82b238ee192ccff9aad4fe4f c4a635d3d43a496aa67b3f5c63864388bfca3da704957f2eb275e39853bba7b8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/css/solid.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "2d5-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 725
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashdcd75ca6daca51c5e39d431468511793 07f76d3bf23d65c9110d810fa71a994e39e085d3 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 13:35:54 GMT
content-type: application/json
age: 3572
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash0b8fe266e96af3f18d489fe629f42904 7f82f864c061f5b526cd0b9dcd60d3f2b66a272c fd870fe43cf71370eeaf81e77113937d2a1a8aa75772c5205b98a7c85fea7478
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FD870FE43CF71370EEAF81E77113937D2A1A8AA75772C5205B98A7C85FEA7478"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4080
Expires: Tue, 31 Jan 2023 15:43:26 GMT
Date: Tue, 31 Jan 2023 14:35:26 GMT
Connection: keep-alive
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/fonts/flaticon.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 3.2 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/fonts/flaticon.css?ver=6.1.1 IP199.250.206.218:0
Hash5bd8e7e0a0b8f97fbfc4d535c219b422 f4bbd1071120ef0a1154723845a1e5bb818a4f64 b4fee6843b6481c71eb2f8d8c879fe4075a4e053def6211f1f7ca733f7738353
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/fonts/flaticon.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "c95-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 3221
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin | 34.111.73.144 | 200 OK | 807 kB |
URL HTTP/2firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin IP34.111.73.144:0
Size807 kB (807180 bytes) Hash914be443bdfbe8a1c3ded61e1c114bd6 4fe7c5ff83f6a29e6699f4cebc17550891504661 41b036d0c889509d547296b238027a063c313261ad52d5f7bb81922011791857
GET /staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin HTTP/1.1
Host: firefox-settings-attachments.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: DYhzcZihah3+nn9uccTU0QhbDsrYIGJkUq7DnVhCQOs6Y7PkJ/a98vsBufG9wJH7B/5czaGL4HQ=
x-amz-request-id: AQB6GT81KDJK8DAX
x-amz-version-id: K1ODzappZsD35qeu0OM5zvs_BP1eybj7
accept-ranges: bytes
server: AmazonS3
content-length: 807180
via: 1.1 google
date: Sat, 28 Jan 2023 15:34:35 GMT
age: 255651
last-modified: Tue, 10 Jan 2023 12:38:46 GMT
etag: "914be443bdfbe8a1c3ded61e1c114bd6"
content-type: application/octet-stream
cache-control: public,max-age=604800
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/headding-title.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 26 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/headding-title.css?ver=6.1.1 IP199.250.206.218:0
Hash19df47802b7742cd583ec6249751c05f c2eecd57bceced18896a30917e085f93dfa85ac5 6beac8ad7b9f2fc06a336dfd12b0bebff2539f90d75a179cb86863d9951734e7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/css/headding-title.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "65e7-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 26087
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/prelements.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 194 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/prelements.css?ver=6.1.1 IP199.250.206.218:0
Size194 kB (193458 bytes) Hashc376b2743649d56a98e5967e0f538e55 4391cae347c71857363e0136d6d53ef06dcf13cc bbdedd399f3612e0d32fefb12268e419bb2e4cc5242c092806f23602fc570d60
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/css/prelements.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "2f3b2-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 193458
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/responsive.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 2.9 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/responsive.css?ver=6.1.1 IP199.250.206.218:0
Hashd023c7dfd72f33a927caa01de62c66ff 7b786bb3085a38928f99c95f8fc86e6d626fd400 bbed15201104f9aa1ff0889ab6f4b5db6a2325e859fad7fce7d1c5577e248696
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/css/responsive.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "b2f-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 2863
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/custom.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 103 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/css/custom.css?ver=6.1.1 IP199.250.206.218:0
Size103 kB (103298 bytes) Hash9babece8e69e5c0c64580fb23dfc2c99 3772a64fc5291afc211f676fe85046c30b0848ed 22ba7ba731a69d14ffd19cf77e6b1d42989ff7505d120cb4ec959589c3a27b36
GET /wp-content/plugins/rs_addons/prelements/assets/css/custom.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "19382-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 103298
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 | 199.250.206.218 | 200 OK | 31 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 IP199.250.206.218:0
File typeASCII text, with very long lines (30837) Hash008e0bb5ebfa7bc298a042f95944df25 93897ebc560b38a1d2bff43c22dd6a3b7ee90c0c c4047043368afb4baf1aed25d358a5c2a333842a3b436b58491ab36aeee65b9d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "7917-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 30999
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1675106528397&_since=%221666279968541%22 | 35.241.9.150 | 200 OK | 68 kB |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1675106528397&_since=%221666279968541%22 IP35.241.9.150:0
File typeASCII text, with very long lines (65536), with no line terminators Hasha538bab9e4d4016d7b88dcd87c1bbdad 3b667d5d37618142e006aca2bee06f17938ac9aa 4b8eadb9a5cc692f6c80438705e21aa539982b7b49bde139f231b5506858da88
GET /v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1675106528397&_since=%221666279968541%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 68426
via: 1.1 google
date: Tue, 31 Jan 2023 13:49:17 GMT
age: 2769
last-modified: Mon, 30 Jan 2023 19:22:08 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| brenderlawfirm.com/wp-content/themes/advokat/assets/css/flaticon.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 5.3 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/assets/css/flaticon.css?ver=6.1.1 IP199.250.206.218:0
Hasha17e4995cbc9c8956ddb9da8c61173cb e809b30b72ef990ed03d1246d6ee170790fbb664 b1af09317285a6c4d7f57f358d82c650e57d2702dac51a04637575c3c0897325
GET /wp-content/themes/advokat/assets/css/flaticon.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "14ac-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 5292
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/themes/advokat/assets/css/owl.carousel.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 4.2 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/assets/css/owl.carousel.css?ver=6.1.1 IP199.250.206.218:0
File typeASCII text, with CRLF line terminators Hashf693a8e5f50f88a4156c2d6ccaccc8c3 4231d6c3be6ccc8d0b71cabb68b0b99c0d40cd42 36aa42382294bd06e999e8ce16e36f39bdcb56e9b95bbbc97f76f1e2c0cdaf99
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/advokat/assets/css/owl.carousel.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "1066-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 4198
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/themes/advokat/assets/css/lineicons.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 7.8 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/assets/css/lineicons.css?ver=6.1.1 IP199.250.206.218:0
Hash29c189849de8753a9d335a99705984d8 6a55d2a59e9442523573d639ca45b730ea74c46d b0942cc350632f9c949d299fe8f407c0df693ebc8766b0eed1859ada9ff57869
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/advokat/assets/css/lineicons.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "1ea0-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 7840
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258 | 35.241.9.150 | 200 OK | 682 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258 IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (682), with no line terminators Hashee3b2ca8193a47eb1c2f1628b80b953f 6b53021c8663e3a0f874c5f030902a78c3ef1b9d 2cc501aa09d747a9b69b88c92f896650b9c9f5c32dae8b2315ab61c63d9a4ccc
GET /v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 682
via: 1.1 google
date: Tue, 31 Jan 2023 13:49:12 GMT
age: 2775
last-modified: Sun, 29 Jan 2023 16:36:52 GMT
etag: "1675010212483"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: p5U4FsZaJu45K1qX5XtgaDtz0Mb/wF3aioxVFr1HoOoonF0ZbR0jp7qPN3xTgpw+oov4bI+4Mb0HYPF+4NBcWQ==
x-amz-request-id: KDJXVBC2MVDN7NNE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 13:51:11 GMT
age: 2656
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| brenderlawfirm.com/wp-content/themes/advokat/assets/css/icofont.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 109 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/assets/css/icofont.css?ver=6.1.1 IP199.250.206.218:0
Size109 kB (108707 bytes) Hash8572c1e3167a3319a1c149f35d8cc1b4 96c1466a0e5dd42149ac1dace548142b929dbc53 ad01257420cca56c0b080f13fa61892bb058aa374d4a0d890fdb42e06aa0ccbe
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/advokat/assets/css/icofont.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "1a8a3-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 108707
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/themes/advokat-child/style.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 13 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat-child/style.css?ver=6.1.1 IP199.250.206.218:0
File typeUnicode text, UTF-8 text, with very long lines (304) Hashdfea79b28937480917474a695fda5961 ed4d0e5094487466ffc64d4b2ebf937a52d96828 3de548c51f759ae62f4c282842e6fdd3a8780a5580aa5a9a7fbec90e88da9adc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/advokat-child/style.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "31f7-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 12791
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/themes/advokat/assets/css/responsive.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 93 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/assets/css/responsive.css?ver=6.1.1 IP199.250.206.218:0
Hash09843be54802161ead0299bf09fdc76b e5121243d13f5243cbe4cb50fd99cd3ac49a63b1 b67f3b5fcb6b29d7441c1ee32f0a3077c2bd131c891d5d103b7c4cd86c9afd0a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/advokat/assets/css/responsive.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "16a35-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 92725
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22 | 35.241.9.150 | 200 OK | 935 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22 IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (935), with no line terminators Hash3d63398bfcd270d3aff50d730b7fbf8e 95b217d19c323845ba9739f9e343ffd4a050dc2a 28be153e42646803b6aa62501fcb5262eea2812237655cec6be8b2a3ff4e7d0c
GET /v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 935
via: 1.1 google
date: Tue, 31 Jan 2023 14:01:29 GMT
age: 2038
last-modified: Sat, 28 Jan 2023 16:36:44 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1674841566207&_since=%221666483264567%22 | 35.241.9.150 | 200 OK | 52 kB |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1674841566207&_since=%221666483264567%22 IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (52267), with no line terminators Hash43fa3c33ef7e1368ef38013ab44077ec 70447b3d512f20511dec32ecad04b77a76a86b6f bae20740abda87eb747664b2ec70fb29c5ff7899292685645d7ed2c609727391
GET /v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1674841566207&_since=%221666483264567%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 52267
via: 1.1 google
date: Tue, 31 Jan 2023 14:33:04 GMT
age: 143
last-modified: Fri, 27 Jan 2023 17:46:06 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash2ac1bcdceabf1fc4e07017906aa8a815 ba00b737325fc50b35af8d851ced0fe13d1cba22 c6c54f5dbbfc40b454b9c67a7972827f500d83b10a1594f7cb56c69158278c08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 14:35:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| detectportal.firefox.com/success.txt?ipv4 | 34.107.221.82 | 200 OK | 8 B |
URL HTTP/1.1detectportal.firefox.com/success.txt?ipv4 IP34.107.221.82:0
Hashae780585f49b94ce1444eb7d28906123 7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86 81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Mon, 30 Jan 2023 17:36:21 GMT
Age: 75546
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
|
|
| brenderlawfirm.com/wp-content/themes/advokat/assets/css/bootstrap.min.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 145 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/assets/css/bootstrap.min.css?ver=6.1.1 IP199.250.206.218:0
File typeASCII text, with very long lines (65325) Size145 kB (144877 bytes) Hash450fc463b8b1a349df717056fbb3e078 895125a4522a3b10ee7ada06ee6503587cbf95c5 2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/advokat/assets/css/bootstrap.min.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "235ed-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 144877
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/themes/advokat/style.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 16 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/style.css?ver=6.1.1 IP199.250.206.218:0
File typeASCII text, with CRLF line terminators Hash5c3a2d653a1a9da4fc5a53f13b782a2c 440caaffa96d0d516f3f3ee2c4b9884de2890580 68ca90933b42e842f695a1b25f26511e001e266da23dfeda230bc041bc74e79a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/advokat/style.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "3fa1-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 16289
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/plugins/cf7-conditional-fields/style.css?ver=2.3.2 | 199.250.206.218 | 200 OK | 1.6 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/cf7-conditional-fields/style.css?ver=2.3.2 IP199.250.206.218:0
Hashf121cbe481654c96ce787303a88233a9 85381754c57b743d3f3d4afef31e802175be215f cedc9155263d1f634191e71f3c9ce256b315f833e375739ed0e65087996428cc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/cf7-conditional-fields/style.css?ver=2.3.2 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Thu, 29 Dec 2022 11:17:58 GMT
ETag: "651-5f0f5a3202580"
Accept-Ranges: bytes
Content-Length: 1617
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.google.com/recaptcha/api.js?render=6LdS8sgaAAAAABVK0q2jyHKLFZhb5M9kN-mIlvSN&ver=3.0 | 142.250.74.164 | 200 OK | 588 B |
URL HTTP/2www.google.com/recaptcha/api.js?render=6LdS8sgaAAAAABVK0q2jyHKLFZhb5M9kN-mIlvSN&ver=3.0 IP142.250.74.164:0
File typeASCII text, with very long lines (884), with no line terminators Hashdcd0fb6fd3992648440781ca0f6170ee f24678bd0f4a89001a5cce83a0774a2b70a1a03f 8e79cfefae25c99c7fda67e02e1ec77f5202150343d3ae7c186a2b305dbd90d7
GET /recaptcha/api.js?render=6LdS8sgaAAAAABVK0q2jyHKLFZhb5M9kN-mIlvSN&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brenderlawfirm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Tue, 31 Jan 2023 14:35:27 GMT
date: Tue, 31 Jan 2023 14:35:27 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 588
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hasha5ff07b9b81cdf319f4a57d8d6dbbd6d 736ae15d0ed2068580d35a7cff8b33c0ec87af52 24406eda914ef8f78e1f60d6b54237ea6311f2fdf54b2b63647d84b397b41de0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 14:35:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/css/frontend.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 56 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/css/frontend.css?ver=6.1.1 IP199.250.206.218:0
File typeASCII text, with very long lines (359), with CRLF line terminators Hashb735a3282c0f25c8c75bc17bdb493cac 76a1812b734980f28cb5ed332e2ef032c438214e da90d4c2844bfbd3be4b338db0624c1b150e122eac6c66629b143a3ae41bf21f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/wp-google-map-plugin/assets/css/frontend.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 25 Jan 2023 12:38:48 GMT
ETag: "d94e-5f315e9ecf03e"
Accept-Ranges: bytes
Content-Length: 55630
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
|
|
| brenderlawfirm.com/wp-content/plugins/popup-anything-on-click/assets/css/popupaoc-public.css?ver=2.2.4 | 199.250.206.218 | 200 OK | 54 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/popup-anything-on-click/assets/css/popupaoc-public.css?ver=2.2.4 IP199.250.206.218:0
File typeASCII text, with very long lines (41691), with CRLF line terminators Hashf2ed12c0714a1294294d07b7a6582cfd 897c620b5f358b282a583990aea3762458c46352 5782da243859ff823754e78456478ad732b8d874171fc9ec6099c87607e10b1b
GET /wp-content/plugins/popup-anything-on-click/assets/css/popupaoc-public.css?ver=2.2.4 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Thu, 29 Dec 2022 11:18:08 GMT
ETag: "d2ff-5f0f5a3b8bc00"
Accept-Ranges: bytes
Content-Length: 54015
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/css
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash40bac282ee9730b7a7fde839fcf58736 be00063ec5c760560f34663d0a6a9cad87cfebe4 45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 14:35:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22 | 35.241.9.150 | 200 OK | 1.5 kB |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22 IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (1505), with no line terminators Hashbf91148bc6bc52655c8e8138e8a0a4f4 919f632d0fa2021439aefb26804e6c811f077343 0b87aabbe04ee50ba0cdfdfd6710e761f3ede6ac42cc8faa1b136315529daabf
GET /v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1505
via: 1.1 google
date: Tue, 31 Jan 2023 13:55:08 GMT
age: 2419
last-modified: Fri, 27 Jan 2023 16:36:46 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| brenderlawfirm.com/wp-content/themes/advokat/assets/css/default.css?ver=6.1.1 | 199.250.206.218 | 200 OK | 442 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/assets/css/default.css?ver=6.1.1 IP199.250.206.218:0
Size442 kB (442391 bytes) Hashe09178f8b7df9a7192eb647b3d83c359 af121117cb3ea1c25dfb006b6a952e2cf6919e2d a9b5bb55a952b5577d94cb74190f7e02dadbf1245860babe60e3e542dda1885b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/advokat/assets/css/default.css?ver=6.1.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:26 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "6c017-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 442391
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:26 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1674751976728&_since=%221661199949574%22 | 35.241.9.150 | 200 OK | 18 kB |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1674751976728&_since=%221661199949574%22 IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (17471), with no line terminators Hash6e2d33aecce57f200365d89f518caa2a 0226b86348839e3398809b8e542aa7daf6909ba6 1fa13b584b43bddc8fd2e1fc57676c930b50dea74726a9c2fc55e35dca77ebfd
GET /v1/buckets/main/collections/search-config/changeset?_expected=1674751976728&_since=%221661199949574%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 17471
via: 1.1 google
date: Tue, 31 Jan 2023 13:49:38 GMT
age: 2749
last-modified: Thu, 26 Jan 2023 16:52:56 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| brenderlawfirm.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 199.250.206.218 | 200 OK | 90 kB |
URL HTTP/1.1brenderlawfirm.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP199.250.206.218:0
File typeASCII text, with very long lines (65447) Hash17738318d61d394f1de8890d589afaec f6d0c4dc1399cf02d53f5753ad46573a8bbc2ac3 cc7403bab52ed166e24ea9324241045af370be482f5b594468f4a6ac6e7e7981
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Thu, 29 Dec 2022 11:14:13 GMT
ETag: "15e54-5f0f595b6eb40"
Accept-Ranges: bytes
Content-Length: 89684
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1674132577705&_since=%221657747510534%22 | 35.241.9.150 | 200 OK | 2.1 kB |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1674132577705&_since=%221657747510534%22 IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (2144), with no line terminators Hash5081e6ce6effca1e5ba513b8ee475b1c 56b570761e64c997d2340e4697a1c0e1b06cc0e5 df3c6bd21705a779e7eace5f711efb8e0c91a77a0fd18288d12cf49507f944a2
GET /v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1674132577705&_since=%221657747510534%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 2144
via: 1.1 google
date: Tue, 31 Jan 2023 14:15:43 GMT
age: 1184
last-modified: Thu, 26 Jan 2023 16:36:43 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| brenderlawfirm.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 199.250.206.218 | 200 OK | 11 kB |
URL HTTP/1.1brenderlawfirm.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP199.250.206.218:0
File typeASCII text, with very long lines (11126) Hash79b4956b7ec478ec10244b5e2d33ac7d a46025b9d05e3df30d610a8aef14f392c7058dc9 029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "2bd8-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 11224
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/frontend.js?ver=1 | 199.250.206.218 | 200 OK | 6.4 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/frontend.js?ver=1 IP199.250.206.218:0
File typeHTML document, ASCII text Hash173f3c0a3408d6ec9311dd930e867ed7 e3164399e5e39741e18ab5dd2b7f742cd6c75714 9e9f27a819c9036b39095397e36c510ed13a6deac7f68a4e49f6a2d620d98d88
GET /wp-content/plugins/rs_addons/prelements/assets/js/frontend.js?ver=1 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "1911-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 6417
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/uploads/redux/custom-fonts/fonts.css?ver=1675175725 | 199.250.206.218 | 200 OK | 0 B |
URL HTTP/1.1brenderlawfirm.com/wp-content/uploads/redux/custom-fonts/fonts.css?ver=1675175725 IP199.250.206.218:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1675175725 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 25 Jan 2023 12:37:46 GMT
ETag: "0-5f315e6467d99"
Accept-Ranges: bytes
Content-Length: 0
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/css
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22 | 35.241.9.150 | 200 OK | 1.7 kB |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22 IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (1743), with no line terminators Hashab262a9bb6f1280c3c36ed0ced90f3d5 e042e56c58964267c5ffada95c35cf17f9f844be 5a6ea549b05e1a0061529a1e08b3863a74f8ae84036353d6e24fac17583d689d
GET /v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1743
via: 1.1 google
date: Tue, 31 Jan 2023 14:19:57 GMT
age: 930
last-modified: Tue, 24 Jan 2023 21:17:28 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| brenderlawfirm.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.3 | 199.250.206.218 | 200 OK | 11 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.3 IP199.250.206.218:0
File typeASCII text, with very long lines (10565), with no line terminators Hash7f0734e228d3f1a255a8b817a5005b8e 3dfca70a7a3e298fc392f2393ca60d350eebb5fd 23bb39b607b39a93d953762d2a618a3cbc69c52ceaf70d96890137ca1d2b0228
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.3 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Thu, 26 Jan 2023 12:29:20 GMT
ETag: "2945-5f329e5eb71a5"
Accept-Ranges: bytes
Content-Length: 10565
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1674595012490&_since=%221662044085942%22 | 35.241.9.150 | 200 OK | 4.3 kB |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1674595012490&_since=%221662044085942%22 IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (4318), with no line terminators Hashd2da10d4238679967f2f1b3c1b9b23c4 975faf29a2f3f3e7033760e2dbcfaedacdf10df0 06f2f6e989845778d3804554769b028d9d95378aafbeffd125c1f977a64b82d3
GET /v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1674595012490&_since=%221662044085942%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 4318
via: 1.1 google
date: Tue, 31 Jan 2023 13:56:11 GMT
age: 2356
last-modified: Tue, 24 Jan 2023 21:16:52 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| brenderlawfirm.com/wp-content/plugins/popup-anything-on-click/assets/js/popupaoc-public.js?ver=2.2.4 | 199.250.206.218 | 200 OK | 8.6 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/popup-anything-on-click/assets/js/popupaoc-public.js?ver=2.2.4 IP199.250.206.218:0
File typeASCII text, with CRLF line terminators Hash5c60b7dc63fce450a5e47240afbb0e7f cbee9e277e1a67938685a71e0d46938d9cd8b435 ab68ac9e5c513d8c8dac3d7e18d9e01f9fb029edf76da2d083152ab187b0122e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/popup-anything-on-click/assets/js/popupaoc-public.js?ver=2.2.4 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Thu, 29 Dec 2022 11:18:08 GMT
ETag: "2198-5f0f5a3b8bc00"
Accept-Ranges: bytes
Content-Length: 8600
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.3 | 199.250.206.218 | 200 OK | 13 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.3 IP199.250.206.218:0
File typeHTML document, ASCII text, with very long lines (12761), with no line terminators Hashc324038c8d6cd7e9990ff50520625008 a707f321bad9f20c442b776efa6812c8acadb8c0 af0f96462799a9eccfa6c5a30819ea991f9c0c4eddaa2984a638dc473c03ce2f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.3 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Thu, 26 Jan 2023 12:29:19 GMT
ETag: "31d9-5f329e5e0b3a5"
Accept-Ranges: bytes
Content-Length: 12761
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.6.10 | 199.250.206.218 | 200 OK | 166 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.6.10 IP199.250.206.218:0
File typeASCII text, with very long lines (45047), with CRLF line terminators Size166 kB (165505 bytes) Hash7722baa787dec6f4e3831067d4cea8f8 ace1624f275bc847a9b0b6d11df6284515a6c63f 52984e532d02a87a060764ff400626a1b81cc316284a8ba1feab5d94697119a0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.6.10 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 25 Jan 2023 00:34:52 GMT
ETag: "28681-5f30bccefa300"
Accept-Ranges: bytes
Content-Length: 165505
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/instafeed.min.js?ver=201513434 | 199.250.206.218 | 200 OK | 6.8 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/instafeed.min.js?ver=201513434 IP199.250.206.218:0
File typeASCII text, with very long lines (6749) Hash272c98a647db50fb4c8a06c3c846cb95 cb3d59ec1f4ef0e2be72e4a8c474c38008f051aa ed732bb4390cf0a91cda383bea4bf7ead4b22ef8826ce27d75f056635e66eeff
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/js/instafeed.min.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "1a71-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 6769
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashf075625a67cefc01c034a3c732ec8023 c3ef563fbf1cf30f75fc931f82426a0f859ccb6d 75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 14:35:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashf075625a67cefc01c034a3c732ec8023 c3ef563fbf1cf30f75fc931f82426a0f859ccb6d 75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 14:35:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/prelements-instagram.js?ver=201513434 | 199.250.206.218 | 200 OK | 6.3 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/prelements-instagram.js?ver=201513434 IP199.250.206.218:0
Hash76e273927531e4e0c24006711d068dfd c7411a01648784eed954049121299be96719e185 2781d4e0f7a6d5fd74884fc9c2294af2183a1f3ea11d4e047691008c2fae0103
GET /wp-content/plugins/rs_addons/prelements/assets/js/prelements-instagram.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "187b-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 6267
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashf075625a67cefc01c034a3c732ec8023 c3ef563fbf1cf30f75fc931f82426a0f859ccb6d 75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 14:35:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 | 142.250.74.35 | 200 OK | 36 kB |
URL HTTP/2fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 35764, version 1.0\012- data Hash60f23230f1a8d5c3b7d25b73f5b5ce23 ed08ada85d017893b9bcb8224e99154c6708f5d2 22b6cdc450204c1cb32b31e679d812fea1c17ac506a7b78daeb12bd0ab25fde8
GET /s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://brenderlawfirm.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 18:29:09 GMT
expires: Mon, 29 Jan 2024 18:29:09 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Jul 2022 19:06:36 GMT
content-type: font/woff2
age: 158778
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 | 142.250.74.35 | 200 OK | 48 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data Hash17b406b7b8caa297435fa358e194f5a1 e2132f0e97781af56fa966c0fabb49132f2af203 84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://brenderlawfirm.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 09:41:19 GMT
expires: Wed, 31 Jan 2024 09:41:19 GMT
cache-control: public, max-age=31536000
age: 17648
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.35 | 200 OK | 45 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data Hash565ce506190ad3af920b40baf1794cec ad3cba5d06100e09449a864d3b5e58403b478b3d 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://brenderlawfirm.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 18:52:41 GMT
expires: Tue, 30 Jan 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 70966
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22 | 35.241.9.150 | 200 OK | 1.7 kB |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22 IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (1719), with no line terminators Hash72383bcf75fd3f95b04c04f9b29e6f46 9af7454ba7e71364303c3b2fed36d96138acf802 145b07c9a17c643743a65915536b5c73e7a5bd00b689b1c411a32f3a56ff763d
GET /v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1719
via: 1.1 google
date: Tue, 31 Jan 2023 13:46:29 GMT
age: 2938
last-modified: Tue, 24 Jan 2023 16:36:44 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash789b41f1f8027d4275a66ac9cb2f124d c5eff6750f9a50fc52a7a6ec6e30a7afaf28fc79 e053b0b29fc44721473ed39ddfe41064f09b56b3531c765228fa322d599e770f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 14:35:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/jquery.plugin.js?ver=201513434 | 199.250.206.218 | 200 OK | 12 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/jquery.plugin.js?ver=201513434 IP199.250.206.218:0
File typeASCII text, with CRLF line terminators Hash5089653f43d0a3970aae2bed9a31666a f3fa11db281157834693b61afb550b68908758b4 3ebcd7d59c2e596630fee4b6f1500f960e63f514a6816f11031c2d484d1f2683
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/js/jquery.plugin.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "2cf9-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 11513
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/twitter-widgets.js?ver=201513434 | 199.250.206.218 | 200 OK | 146 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/twitter-widgets.js?ver=201513434 IP199.250.206.218:0
File typeASCII text, with very long lines (29756) Size146 kB (146424 bytes) Hash574835d68fa184f13175be6c1018ad61 a4cfd6f5aeb20e56d6330400fae303fdf3b90fbd e994acaedc53c843889e75975c94b5661738fe6682286a14248ce68731b3ff4b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/js/twitter-widgets.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "23bf8-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 146424
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22 | 35.241.9.150 | 200 OK | 1.3 kB |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22 IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (1250), with no line terminators Hash813d4e664d5e77312ff4d33db52751ed fc198a56a45d8ee8594c067bd17ba4f30569201e 2051a6f05a4a12e0b4a2c0772ab9b7773bdd4ce903c95b9976a9cb1dd1666719
GET /v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1250
via: 1.1 google
date: Tue, 31 Jan 2023 13:46:26 GMT
age: 2941
last-modified: Tue, 24 Jan 2023 16:36:43 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/jquery.cookie.js?ver=201513434 | 199.250.206.218 | 200 OK | 3.1 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/jquery.cookie.js?ver=201513434 IP199.250.206.218:0
Hash0f1f6cd6e0036897019b376d38593403 498b29de6e170fffc8535183b7d6550490f0a159 8c0301b3dba5061632d7321cd8bb7bd527f48288d5cb15ff614ea0c1dcc1ad69
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/js/jquery.cookie.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "c44-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 3140
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/jquery.magnific-popup.min.js?ver=201513434 | 199.250.206.218 | 200 OK | 20 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/jquery.magnific-popup.min.js?ver=201513434 IP199.250.206.218:0
File typeASCII text, with very long lines (20087) Hashba6cf724c8bb1cf5b084e79ff230626e f455c5f153f872e52265f87a644ff89fe14a6fb6 3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/js/jquery.magnific-popup.min.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "4ef8-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 20216
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14619
Expires: Tue, 31 Jan 2023 18:39:06 GMT
Date: Tue, 31 Jan 2023 14:35:27 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14619
Expires: Tue, 31 Jan 2023 18:39:06 GMT
Date: Tue, 31 Jan 2023 14:35:27 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14619
Expires: Tue, 31 Jan 2023 18:39:06 GMT
Date: Tue, 31 Jan 2023 14:35:27 GMT
Connection: keep-alive
|
|
| brenderlawfirm.com/wp-content/plugins/bdthemes-element-pack-lite/assets/vendor/js/popper.min.js | 199.250.206.218 | 200 OK | 22 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/bdthemes-element-pack-lite/assets/vendor/js/popper.min.js IP199.250.206.218:0
File typeASCII text, with very long lines (20918) Hasha2c4eb71a8b00e507d5962e0e952e0b4 69269a2309fda960324d34fd7b0d02d6de53b842 fc5b8dfb8a0d17600016087b8d4ca72d5fad72b653436764974ac7b03fc2fa30
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/bdthemes-element-pack-lite/assets/vendor/js/popper.min.js HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Fri, 30 Apr 2021 11:11:52 GMT
ETag: "56a4-5c12eadcb6e00"
Accept-Ranges: bytes
Content-Length: 22180
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2c4934be94898028e2ab696561b51462 6cf734e2d29938688913daacfb75506d8e004a94 239adcbb538b7a6d1483c65c7694d4a9f9fa9cadf456ab5681c4b764185e3596
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9987
x-amzn-requestid: 67109f87-6073-4991-b540-cdeedc2d7b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flYlPF9uIAMFXMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86e21-60ac2c7b37c72e6e54a5c69d;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:25:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Gif_csWkacU59D_hnOrJpK6u2aPI8Ylf2JyQEJZ2RLNMCrXSmmMa9w==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:56:35 GMT
age: 45532
etag: "6cf734e2d29938688913daacfb75506d8e004a94"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg | 34.120.237.76 | 200 OK | 14 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd957012d3e2b8c3bc0eefe11d66e8554 1959fdd94846fa3791c4890578dd15336b909dcc a97e81ec5eb2eda6a603bf4bfd4fa4ef4fab762747479489e99e6c713258a736
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13853
x-amzn-requestid: ca6ea6e7-3e13-4194-87f5-20a07b813e21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk3zzF4hIAMFwWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839b1-772487cb1b7495c52c552d36;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lUGjUSIkoacdmaO1jnMwIuNMONhjyVfAIcTQ3B5d5da_g9eEnCtW7g==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:48:17 GMT
age: 60430
etag: "1959fdd94846fa3791c4890578dd15336b909dcc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2797bfd35b7ec24888de84be14f7f2ec 8e315ac5856967286eaa8769e081d827fb4ca39e b99f3bd73eb4395194bc7bb6a1b801750182239e5b70f3207f99e494b60b72ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11129
x-amzn-requestid: 74f2a4dd-7d5d-4839-90a8-d2e74f6d785d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffDBZGRPoAMFedg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e53b-3de444596550bb41188ada5b;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:17:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9Fga247EZZqiGmdMJ72resdBZR2KLgflGDBPESmuw9cFVs4hSzMzTw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 03:50:52 GMT
age: 38675
etag: "8e315ac5856967286eaa8769e081d827fb4ca39e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4a2d26da68a313cc65958fc2692351c2 798c3538f3147ca77d317676ddd1bf040bd0f93b 76ce30224803d680c0115e987a712ce5552b2760beadf796a96b17439fb20797
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10898
x-amzn-requestid: e29f8dfc-07d4-4136-afaf-e1e067eea2ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk3zxGshIAMFw5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839b1-5e87d2a44722af9e4e86c3d4;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XYo_QvM8GWDyulOtUb5nVjS9PxOinaRJ3lYvCreeqd_9tHI5yv5xcQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:48:21 GMT
age: 60426
etag: "798c3538f3147ca77d317676ddd1bf040bd0f93b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg | 34.120.237.76 | 200 OK | 8.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe6f9ffb8f9e99229b45ca5fdb84ce7d5 04577ad69ee9749b14382254eb5bbf0e1edcd7fa 6111acf3f363123b39d13cd3d23ab39b8c8d00379874f19231d1cd3da17c52c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8558
x-amzn-requestid: 2841cd36-22e6-4ecb-b56a-bfadce3197c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffB_BFA8IAMFyvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e393-3fd03bd14de762b0738a3b0a;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:10:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: R29JYq4Z8V_Xuq2no0bKxk1K6h2PmTO5OSxzMa4zppDVk3j9rO9aTw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 03:24:36 GMT
age: 40251
etag: "04577ad69ee9749b14382254eb5bbf0e1edcd7fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg | 34.120.237.76 | 200 OK | 6.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash976dda397f9292a498ca9db5599c0378 dad9e9c3462907a2475046aee36d57f8309cd44e 7ed9ccf2ff75ca53f5ba56a1d2127e0f09b0ae941cad8b042e8df01ad01e614b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6844
x-amzn-requestid: 0542cf46-5045-459f-a35f-f6c0d3f5f7b7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flZsxH0YIAMF9ew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86feb-692d50f710a131df2ee49aa8;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oLMUuQVwUyKMuYAvTkA4wlVDb3-kZjStTJFfUZRb7JwKcK11waY0kQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:42:39 GMT
age: 46368
etag: "dad9e9c3462907a2475046aee36d57f8309cd44e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/bootstrap.min.js?ver=201513434 | 199.250.206.218 | 200 OK | 58 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/bootstrap.min.js?ver=201513434 IP199.250.206.218:0
File typeASCII text, with very long lines (57791) Hashe1d98d47689e00f8ecbc5d9f61bdb42e 6778fed3cf095a318141a31f455c8f4663885bde 0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/js/bootstrap.min.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "e2d8-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 58072
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/datatables.min.js?ver=201513434 | 199.250.206.218 | 200 OK | 85 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/datatables.min.js?ver=201513434 IP199.250.206.218:0
File typeUnicode text, UTF-8 text, with very long lines (624) Hashc227df9ba95c8350d1e447a2aebe3f85 f0934e1189da3d96aee9422891860b08ee2cf7a2 53b04c48be94528907178560980a431336181028b16c15c5f8e061d2c2a8f66e
GET /wp-content/plugins/rs_addons/prelements/assets/js/datatables.min.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "14c61-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 85089
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/waypoints.min.js?ver=201513434 | 199.250.206.218 | 200 OK | 8.1 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/waypoints.min.js?ver=201513434 IP199.250.206.218:0
File typeASCII text, with very long lines (7822) Hash6afbe9ac29006d1e859730adcea67dfa f0c5c3a93480c230dea747b9749afe5e2f6c9106 a65638715271e0c47e5d72c041540886d94a5e06d10ce60a6fee1fcd8d534b45
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/js/waypoints.min.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "1f7a-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 8058
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4 | 199.250.206.218 | 200 OK | 5.6 kB |
URL HTTP/1.1brenderlawfirm.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4 IP199.250.206.218:0
File typeASCII text, with very long lines (5477) Hash3a56752b736635bf69cb069b8818cbfd 42e0951fe74bb3f56a30f51291823bcd4a84d76e ff4bd34aa98a0214833619d3d751838db015722dfbbec15cd14dadc66cd67869
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "15fd-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 5629
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/isotope-prelements.js?ver=201513434 | 199.250.206.218 | 200 OK | 35 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/isotope-prelements.js?ver=201513434 IP199.250.206.218:0
File typeASCII text, with very long lines (32027) Hash7a607c677b21dbc691582b6504a9c8de faddb730ec2f82b627e9565c44615e804ad0e8fa 12c7afb612e3dbaaa7faba98ecee93b0a3ddc5f77bc48ce1bc53142246524a3c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/js/isotope-prelements.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "89fe-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 35326
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/time-circle.js?ver=201513434 | 199.250.206.218 | 200 OK | 35 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/time-circle.js?ver=201513434 IP199.250.206.218:0
File typeASCII text, with CRLF line terminators Hash6eb8f7103c52ec9dd340141739bfe964 37090f9c6e5b9ac25e391d399e7a3efb2a38c1ad 0478b05d009dfeb2f68138e75695dbd3db2abf168a20ebb145ee111edbdd19c3
GET /wp-content/plugins/rs_addons/prelements/assets/js/time-circle.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "88ae-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 34990
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/headding-title.js?ver=201513434 | 199.250.206.218 | 200 OK | 5.7 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/headding-title.js?ver=201513434 IP199.250.206.218:0
Hash3bb2c1814d72b1f5cb5f5ce2c9992b52 ce1a6593887ba146af8e944c58ed8ab4deddccd5 69a51a1ba4f871021624e6394c9442be42bf0cba6923bc4caa0181c240cec8df
GET /wp-content/plugins/rs_addons/prelements/assets/js/headding-title.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "1653-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 5715
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/jquery.flipster.js?ver=201513434 | 199.250.206.218 | 200 OK | 27 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/jquery.flipster.js?ver=201513434 IP199.250.206.218:0
File typeASCII text, with CRLF, LF line terminators Hashc8a0ce0147137660215e5bd74f09a3e2 597dfad70cf1ad0c75ac1e7ed3bf646ec7a67624 f3014bfb8ae86c31b7c82f87575e8eb13cde3fe142e0c0e5e7b6aaeeed504f2c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/js/jquery.flipster.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "68f5-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 26869
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/slick.min.js?ver=201513434 | 199.250.206.218 | 200 OK | 43 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/slick.min.js?ver=201513434 IP199.250.206.218:0
File typeASCII text, with very long lines (42862) Hashd5a61c749e44e47159af8a6579dda121 3b41b3bc956685015a347a2238e71db29dfa0dbb 0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/js/slick.min.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "a76f-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 42863
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/jquery-ui.js?ver=201513434 | 199.250.206.218 | 200 OK | 520 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/jquery-ui.js?ver=201513434 IP199.250.206.218:0
File typeASCII text, with very long lines (1002) Size520 kB (520329 bytes) Hash05a1a83f801902bbde2ce7e2dbe6f539 4aab9032159f7155b4ecb913d56a9ddbedb1a30d c162e3d38aa94b79e7642edb7709340db343f38085aecab0b1fcdd7b028a2638
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/js/jquery-ui.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "7f089-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 520329
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/jQuery-plugin-progressbar.js?ver=201513434 | 199.250.206.218 | 200 OK | 5.5 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/jQuery-plugin-progressbar.js?ver=201513434 IP199.250.206.218:0
Hashb512d50a2e4e354159cb02c7d9ca9065 bef474e847fafb6a805d42d707b3b4a65d999892 6036f29658f9be31ac4b4bdfa5d1aed1602dec83977846b230862e0fb2056e49
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/js/jQuery-plugin-progressbar.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "15a7-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 5543
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/move-direction.js?ver=201513434 | 199.250.206.218 | 200 OK | 5.5 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/move-direction.js?ver=201513434 IP199.250.206.218:0
File typeASCII text, with CRLF line terminators Hash5e499dcbe4cc65c4c94b91ba389bd040 2f38766f2aff3826b3764d58e6fe517ae9a8686c 8b2e7abb4df3b49f9a5ce31c557f2c58cae0f42189b717049ab862e5f99bfc00
GET /wp-content/plugins/rs_addons/prelements/assets/js/move-direction.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "1597-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 5527
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/custom.js?ver=201513434 | 199.250.206.218 | 200 OK | 18 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/rs_addons/prelements/assets/js/custom.js?ver=201513434 IP199.250.206.218:0
Hashd52ff2716d99c8126c75b2cde154667c 52eefa7c39423fc68b4b794f7d10ec110f1d1ef8 ea2d3b4961651ea2e18be9552222858ac3ff5ba11370bbb4163c72a3dc07b911
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/rs_addons/prelements/assets/js/custom.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "4757-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 18263
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/themes/advokat/assets/js/modernizr-2.8.3.min.js?ver=20151215 | 199.250.206.218 | 200 OK | 16 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/assets/js/modernizr-2.8.3.min.js?ver=20151215 IP199.250.206.218:0
File typeHTML document, ASCII text, with very long lines (14856) Hashda941a6e1e1df098744318f6d25ba13a 15f441d0df5a01efc674d62b88c0c95bf233656a 2b0f8526e7a1b0f1fb42e8acec3c1e7737a1a3065b773ebd13a492952f557967
GET /wp-content/themes/advokat/assets/js/modernizr-2.8.3.min.js?ver=20151215 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "3c9a-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 15514
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/themes/advokat/assets/js/owl.carousel.min.js?ver=20151215 | 199.250.206.218 | 200 OK | 43 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/assets/js/owl.carousel.min.js?ver=20151215 IP199.250.206.218:0
File typeASCII text, with very long lines (32000), with CRLF line terminators Hash56b28ad35f1816c6894b14190a0a006d 967ceaa9e6f67e636d818f42b4d5d15c7a4a254e b5757aa153f991c82c949e638c56b4913042196240f3a41cec5a40c3366d1bdd
GET /wp-content/themes/advokat/assets/js/owl.carousel.min.js?ver=20151215 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "a714-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 42772
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/themes/advokat/assets/js/waypoints-sticky.min.js?ver=20151215 | 199.250.206.218 | 200 OK | 1.2 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/assets/js/waypoints-sticky.min.js?ver=20151215 IP199.250.206.218:0
File typeASCII text, with very long lines (944) Hash592deb4a2dac60910d7129f97c47f91f bc5118f65eecf69f5a7138c748375b11a1f62cce ee5de4bbbf803c4ff05f94fc34b103e4aaa3876fd0dffd16f0479e58755288eb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/advokat/assets/js/waypoints-sticky.min.js?ver=20151215 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "4a4-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 1188
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/themes/advokat/assets/js/isotope-advokat.js?ver=20151215 | 199.250.206.218 | 200 OK | 35 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/assets/js/isotope-advokat.js?ver=20151215 IP199.250.206.218:0
File typeASCII text, with very long lines (32027) Hash7a607c677b21dbc691582b6504a9c8de faddb730ec2f82b627e9565c44615e804ad0e8fa 12c7afb612e3dbaaa7faba98ecee93b0a3ddc5f77bc48ce1bc53142246524a3c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/advokat/assets/js/isotope-advokat.js?ver=20151215 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "89fe-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 35326
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/themes/advokat/assets/js/flickr/jflickrfeed.min.js?ver=20151215 | 199.250.206.218 | 200 OK | 1.7 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/assets/js/flickr/jflickrfeed.min.js?ver=20151215 IP199.250.206.218:0
File typeASCII text, with very long lines (420), with CRLF line terminators Hashfbf50aa82dc50bf879fa520bcae1fc90 7b62e319aaaa5d91e18ad7739ab87579d4e6d7fe fc6516d82e1228d59bf7a37b1d9682ce6bfc1bbac41201ed825713c602ed72ed
GET /wp-content/themes/advokat/assets/js/flickr/jflickrfeed.min.js?ver=20151215 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "6be-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 1726
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/themes/advokat/assets/js/main.js?ver=201513434 | 199.250.206.218 | 200 OK | 27 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/assets/js/main.js?ver=201513434 IP199.250.206.218:0
File typeHTML document, ASCII text Hash077c5329ab1ac2db5e270071ca00a5f6 dc3c25c6a653b922f6787d62439784cc9024eab6 49af56e66260a2dbab7f7a8e6026239846a179238eed8b8ec187c32548e5c7dd
GET /wp-content/themes/advokat/assets/js/main.js?ver=201513434 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "68e8-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 26856
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/themes/advokat/assets/js/jquery.magnific-popup.min.js?ver=20151215 | 199.250.206.218 | 200 OK | 20 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/assets/js/jquery.magnific-popup.min.js?ver=20151215 IP199.250.206.218:0
File typeASCII text, with very long lines (20101) Hashedb2fb875e1b2345dfdc8e3ae5022514 bcc892714dc191598e375b2ebc61f5e2e4c88048 539d846262b7399ff1daee9b35165e0a2abfa7e8ecfdabdfe3101394a33d03ce
GET /wp-content/themes/advokat/assets/js/jquery.magnific-popup.min.js?ver=20151215 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "4f06-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 20230
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/js/vendor/webfont/webfont.js?ver=2.3.4 | 199.250.206.218 | 200 OK | 13 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/js/vendor/webfont/webfont.js?ver=2.3.4 IP199.250.206.218:0
File typeASCII text, with very long lines (2134) Hash7c96a5f11d9741541d5e3c42ff6380d7 d3fa2564c021cf730e58ffddb138cf6b57ed126e 81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/wp-google-map-plugin/assets/js/vendor/webfont/webfont.js?ver=2.3.4 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 25 Jan 2023 12:38:47 GMT
ETag: "3384-5f315e9ebcf2e"
Accept-Ranges: bytes
Content-Length: 13188
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/js/vendor/jscrollpane/jscrollpane.js?ver=2.3.4 | 199.250.206.218 | 200 OK | 25 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/js/vendor/jscrollpane/jscrollpane.js?ver=2.3.4 IP199.250.206.218:0
File typeASCII text, with very long lines (844) Hashe2bfaad28d7678e8a1f114e31080e4e9 d42d3f7cea26f118eef0150a2b79c2f9189d52d8 8f4bd64f5d70475462e218f3ac0a85e5a9c4a69b219ae43c0e01874eaee7ee7f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/wp-google-map-plugin/assets/js/vendor/jscrollpane/jscrollpane.js?ver=2.3.4 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 25 Jan 2023 12:38:47 GMT
ETag: "6293-5f315e9ebd316"
Accept-Ranges: bytes
Content-Length: 25235
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/js/vendor/accordion/accordion.js?ver=2.3.4 | 199.250.206.218 | 200 OK | 8.2 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/js/vendor/accordion/accordion.js?ver=2.3.4 IP199.250.206.218:0
Hash139aa2b35b06691a01ff87aeca8757ca fb671897e3a3f27743ae922e30a38d6b172da6fe 7a81205c9257567895a5b1e7a4af42df493d8c5d877bb8b5a75ba3a00fc3d378
GET /wp-content/plugins/wp-google-map-plugin/assets/js/vendor/accordion/accordion.js?ver=2.3.4 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 25 Jan 2023 12:38:47 GMT
ETag: "1ff4-5f315e9ebcf2e"
Accept-Ranges: bytes
Content-Length: 8180
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/js/vendor/markerclustererplus/markerclustererplus.js?ver=2.3.4 | 199.250.206.218 | 200 OK | 53 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/js/vendor/markerclustererplus/markerclustererplus.js?ver=2.3.4 IP199.250.206.218:0
File typeHTML document, ASCII text Hashdc249aedab5f82a314cb9a901fb3b2d4 259fc5053f1c86b11fadf1098e4aa12e741456d4 804f2c7a54a6201b571cf94b7d160ffc83a08a6f18c7448f9e09cfa3cd24589a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/wp-google-map-plugin/assets/js/vendor/markerclustererplus/markerclustererplus.js?ver=2.3.4 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 25 Jan 2023 12:38:47 GMT
ETag: "d043-5f315e9ebdae6"
Accept-Ranges: bytes
Content-Length: 53315
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/js/maps.js?ver=2.3.4 | 199.250.206.218 | 200 OK | 65 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/js/maps.js?ver=2.3.4 IP199.250.206.218:0
Hashb968079891f89bec841dd0e5dde9c302 d6d4a787ee89d6ed1afcb519713a132ac7e4e266 a31606649c2ca1555e8ffd85ae89af8d1e08c1dc862307bf97ebdcfdebe4fe5b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/wp-google-map-plugin/assets/js/maps.js?ver=2.3.4 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 25 Jan 2023 12:38:47 GMT
ETag: "fd1b-5f315e9ebc75e"
Accept-Ranges: bytes
Content-Length: 64795
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-includes/js/masonry.min.js?ver=4.2.2 | 199.250.206.218 | 200 OK | 24 kB |
URL HTTP/1.1brenderlawfirm.com/wp-includes/js/masonry.min.js?ver=4.2.2 IP199.250.206.218:0
File typeASCII text, with very long lines (23966) Hash3b3fc826e58fc554108e4a651c9c7848 76778fd446e2ff2377588a7b4ac4d79f258427c9 e00add38134eac2fb8e8e9c09cbfff7bbe57952b210322eb2eecb0a21fc055eb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "5e4a-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 24138
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b | 199.250.206.218 | 200 OK | 1.8 kB |
URL HTTP/1.1brenderlawfirm.com/wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b IP199.250.206.218:0
File typeASCII text, with very long lines (1626) Hashcd0eb3406096ff80266e7c9d7d419186 0e3709691bf96233766de30e2fd473b84166c5b6 c2e606e1fc82ea3a554aad5d0520e25d2677b89a891dc5c49e7ace08fce92e25
GET /wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:28 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "71b-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 1819
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:28 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/js/frontend.js?ver=2.3.4 | 199.250.206.218 | 200 OK | 14 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/js/frontend.js?ver=2.3.4 IP199.250.206.218:0
Hash157d9ef7708a02687d5efd3e29946091 1b52340aa0dd6e6eb5ab38ae208df5c073605238 108cc2e5fa6bc2b9484438d002a658b592804308b9e23c082a6215d3bb847b5e
GET /wp-content/plugins/wp-google-map-plugin/assets/js/frontend.js?ver=2.3.4 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:28 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 25 Jan 2023 12:38:47 GMT
ETag: "3786-5f315e9ebcb46"
Accept-Ranges: bytes
Content-Length: 14214
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:28 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/js/vendor/infobox/infobox.js?ver=2.3.4 | 199.250.206.218 | 200 OK | 28 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/wp-google-map-plugin/assets/js/vendor/infobox/infobox.js?ver=2.3.4 IP199.250.206.218:0
Hashc4d88031ecacaef06f613edb47dd30a0 fd46fcb4104ab8faed471162082a5201a007bbc0 32bce456421faecf7accc0afb9f4c5b21e3dd363d2518f29d14a2bb311798ddb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/wp-google-map-plugin/assets/js/vendor/infobox/infobox.js?ver=2.3.4 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:28 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 25 Jan 2023 12:38:47 GMT
ETag: "6b84-5f315e9ebd316"
Accept-Ranges: bytes
Content-Length: 27524
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:28 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/cf7-conditional-fields/js/scripts.js?ver=2.3.2 | 199.250.206.218 | 200 OK | 140 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/cf7-conditional-fields/js/scripts.js?ver=2.3.2 IP199.250.206.218:0
File typeUnicode text, UTF-8 text, with very long lines (595) Size140 kB (139514 bytes) Hashc6f53af9fcf3eec125d61c2211b2e49c 6adbac2da222bfa043117bc43ba61965632b9056 7c77990bc88d4b4834ee62a3ceb8da90c2e24be3d1b44209b6404d1865b99217
GET /wp-content/plugins/cf7-conditional-fields/js/scripts.js?ver=2.3.2 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:28 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Thu, 29 Dec 2022 11:17:58 GMT
ETag: "220fa-5f0f5a3202580"
Accept-Ranges: bytes
Content-Length: 139514
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:28 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 199.250.206.218 | 200 OK | 18 kB |
URL HTTP/1.1brenderlawfirm.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP199.250.206.218:0
File typeUnicode text, UTF-8 text, with very long lines (17819), with no line terminators Hashe495a4709e3eae31c67f8263f25d2d39 d43ba6a092e4823a71f3bff75d5ed279a481636b 1c1fef6e6b4f9832603850b9b6562e74d9a6a3700ba836efe88facc577121e8b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:28 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Thu, 29 Dec 2022 11:14:16 GMT
ETag: "459f-5f0f595e4b200"
Accept-Ranges: bytes
Content-Length: 17823
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:28 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.7.3 | 199.250.206.218 | 200 OK | 999 B |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.7.3 IP199.250.206.218:0
File typeASCII text, with very long lines (999), with no line terminators Hash6a0e8318d42803736d2fafcc12238026 c955314a7e0a9a9871329b0f042c8f0b5df49a78 2648a1333fa24d383fd73a6beaac17156ae78f4267ff7407ad60e05a788df44c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.7.3 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:28 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Thu, 26 Jan 2023 12:29:19 GMT
ETag: "3e7-5f329e5e0907d"
Accept-Ranges: bytes
Content-Length: 999
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:28 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| brenderlawfirm.com/wp-content/themes/advokat/assets/fonts/Flaticon.woff | 199.250.206.218 | 200 OK | 22 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/themes/advokat/assets/fonts/Flaticon.woff IP199.250.206.218:0
File typeWeb Open Font Format, TrueType, length 22408, version 0.0\012- data Hash8ce3c558e5c6647de1d030f1f30706f4 037bd443f39e7b87fe61b01711f46542aec98902 4f567caed45a62018c67c2af620ffcb95ed1d28002211fc70a4fdd9e0ad34abd
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/advokat/assets/fonts/Flaticon.woff HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://brenderlawfirm.com/wp-content/themes/advokat/assets/css/flaticon.css?ver=6.1.1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:28 GMT
Server: Apache
Last-Modified: Mon, 09 May 2022 09:54:27 GMT
ETag: "5788-5de9131949ac0"
Accept-Ranges: bytes
Content-Length: 22408
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:28 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/font-woff
|
|
| www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js | 142.250.74.35 | 200 OK | 164 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js IP142.250.74.35:0
File typeASCII text, with very long lines (771) Size164 kB (163774 bytes) Hash57c909ab73fc27ec24f737bbf1cb1de8 89b2c02e9e7a9a764518fca545d3eec2044fd6d9 7e407e2b00bb7c238c71d96472f7ab030de4e610b1048f0f77b25cb85c2d166b
GET /recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://brenderlawfirm.com
Connection: keep-alive
Referer: https://brenderlawfirm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 17:09:34 GMT
expires: Tue, 30 Jan 2024 17:09:34 GMT
cache-control: public, max-age=31536000
age: 77154
last-modified: Mon, 23 Jan 2023 01:02:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| platform.twitter.com/widgets/widget_iframe.f47a2e0b4471326b6fa0f163bda46011.html?origin=https%3A%2F%2Fbrenderlawfirm.com | 192.229.233.25 | 200 OK | 6.6 kB |
URL HTTP/1.1platform.twitter.com/widgets/widget_iframe.f47a2e0b4471326b6fa0f163bda46011.html?origin=https%3A%2F%2Fbrenderlawfirm.com IP192.229.233.25:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (10099) Hash915648e0b9f1149a0f3424ce299a11a4 2ec48faa6bf74935c083d6b8b7efd3626f35c780 195da6661210f5b48164d447dfd627d3cef9055cbc9c6eeff5c5d6b9045b4465
GET /widgets/widget_iframe.f47a2e0b4471326b6fa0f163bda46011.html?origin=https%3A%2F%2Fbrenderlawfirm.com HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brenderlawfirm.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 579131
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Tue, 31 Jan 2023 14:35:28 GMT
Etag: "a29d8718243e9cb04d88c86eb0afc516+gzip"
Last-Modified: Tue, 13 Mar 2018 20:15:27 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71A)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 6637
|
|
| maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true | 142.250.74.170 | 200 OK | 23 B |
URL HTTP/2maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true IP142.250.74.170:0
File typeJSON data\012- , ASCII text Hashe3981ca10169a319d5aa062bf43a5fa1 2c6ed584767b65688ce99b1ebe1a3b7448a67421 8b0b8749aba12de93f3cf5d86f9fac9d6de7cac400a17473718f182a34ebb7e9
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://brenderlawfirm.com
Connection: keep-alive
Referer: https://brenderlawfirm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 31 Jan 2023 14:35:28 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://brenderlawfirm.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| brenderlawfirm.com/wp-content/uploads/2021/12/cropped-favicon-192x192.png | 199.250.206.218 | 200 OK | 6.2 kB |
URL HTTP/1.1brenderlawfirm.com/wp-content/uploads/2021/12/cropped-favicon-192x192.png IP199.250.206.218:0
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hash0749a30c539bb14f542317782b1323b4 ef66a5d1240010371de830844dda5a54c8c46695 655a078b2c19f73bd0a5fd286ccd6f5095f16151adf5818c563f16e8be57ab62
GET /wp-content/uploads/2021/12/cropped-favicon-192x192.png HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:28 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Tue, 05 Jul 2022 11:52:02 GMT
ETag: "185e-5e30d7b0bbc80"
Accept-Ranges: bytes
Content-Length: 6238
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:28 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: image/png
|
|
| brenderlawfirm.com/wp-content/uploads/2021/12/cropped-favicon-32x32.png | 199.250.206.218 | 200 OK | 794 B |
URL HTTP/1.1brenderlawfirm.com/wp-content/uploads/2021/12/cropped-favicon-32x32.png IP199.250.206.218:0
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data Hashc897354e69cb91fdaee194c69a6fe60e b76c2b7479b1622cb8c8b07cecaa390c03b414dd 9d2b81f18a64c739c5fe929b28e776411d22cd9fedb1facc9e5656843de58a6f
GET /wp-content/uploads/2021/12/cropped-favicon-32x32.png HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:28 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Tue, 05 Jul 2022 11:52:02 GMT
ETag: "31a-5e30d7b0bbc80"
Accept-Ranges: bytes
Content-Length: 794
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:28 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: image/png
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 313 B |
IP93.184.220.29:0
Hash4867f25d0deeac2ee7e5f001331f35e0 884c3adc8ca1fc39dd80535df2ab45a6a203d9fb 5e414dce0306d561545b08e33a9c09e68f9cf932289e74a1808056e8bfa0a615
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4668
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 14:35:28 GMT
Last-Modified: Tue, 31 Jan 2023 13:17:40 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 313
|
|
| syndication.twitter.com/settings | 104.244.42.136 | 200 OK | 312 B |
URL HTTP/2syndication.twitter.com/settings IP104.244.42.136:0
File typeJSON data\012- , ASCII text, with very long lines (859), with no line terminators Hash211c7f87df5804486bccb64d1c96a0e5 be623ac88569b39ee68abfe4218f7dd101712c7c 8faaa455c3d0ce755c901e5c0615ab3aad0e589a85a71a22de75c6565ff1b217
GET /settings HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 14:35:27 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Tue, 31 Jan 2023 14:35:28 GMT
content-length: 312
content-encoding: gzip
x-transaction-id: ff7689e71c658052
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 104
x-connection-hash: b0318ac0d91dfa68a2613d96d89b1473a2faa81835f3d93f0bc08a370d8e5df5
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/styles__ltr.css | 142.250.74.35 | 200 OK | 25 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/styles__ltr.css IP142.250.74.35:0
File typeASCII text, with very long lines (56403), with no line terminators Hasha42c6333a13e5376af95f46fd9c7b627 57a98e519a44915e39a0cb6f23812adfa6611e67 62bff9dd0379da44f9d7f739af671bb6b243c016b49c7146b431ae9e6b9cb41b
GET /recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24605
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 17:12:49 GMT
expires: Tue, 30 Jan 2024 17:12:49 GMT
cache-control: public, max-age=31536000
age: 76959
last-modified: Mon, 23 Jan 2023 01:02:00 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js | 142.250.74.35 | 200 OK | 164 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js IP142.250.74.35:0
File typeASCII text, with very long lines (771) Size164 kB (163774 bytes) Hash57c909ab73fc27ec24f737bbf1cb1de8 89b2c02e9e7a9a764518fca545d3eec2044fd6d9 7e407e2b00bb7c238c71d96472f7ab030de4e610b1048f0f77b25cb85c2d166b
GET /recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 17:09:34 GMT
expires: Tue, 30 Jan 2024 17:09:34 GMT
cache-control: public, max-age=31536000
age: 77154
last-modified: Mon, 23 Jan 2023 01:02:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| syndication.twitter.com/i/jot | 104.244.42.136 | 301 Moved Permanently | 0 B |
URL HTTP/2syndication.twitter.com/i/jot IP104.244.42.136:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /i/jot HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2533
Origin: https://brenderlawfirm.com
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Tue, 31 Jan 2023 14:35:28 GMT
perf: 7626143928
vary: Origin
server: tsa_o
location: https://platform.twitter.com/jot.html
cache-control: must-revalidate, max-age=600
last-modified: Tue, 31 Jan 2023 14:35:28 GMT
content-length: 0
x-transaction-id: 342581e52889fa61
strict-transport-security: max-age=631138519
access-control-allow-origin: https://brenderlawfirm.com
access-control-allow-credentials: true
x-response-time: 111
x-connection-hash: b0318ac0d91dfa68a2613d96d89b1473a2faa81835f3d93f0bc08a370d8e5df5
X-Firefox-Spdy: h2
|
|
| platform.twitter.com/jot.html | 192.229.233.25 | 200 OK | 80 B |
URL HTTP/1.1platform.twitter.com/jot.html IP192.229.233.25:0
File typeHTML document text\012- HTML document text\012- exported SGML document, ASCII text Hashd9592a6c704736fa4da218d4357976dd fcbb8d048cc536c44f3db5a7ae4c0c10fd6847ac 90214d135602962e47ea9587a7eeb62fac1c64a541e373ea76e2b4e8b33e3f88
GET /jot.html HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 579003
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Tue, 31 Jan 2023 14:35:28 GMT
Etag: "d9592a6c704736fa4da218d4357976dd"
Last-Modified: Tue, 24 Jan 2023 21:41:51 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F709)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 80
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.35 | 200 OK | 15 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 21:48:03 GMT
expires: Fri, 26 Jan 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 406045
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 16:40:43 GMT
expires: Fri, 26 Jan 2024 16:40:43 GMT
cache-control: public, max-age=31536000
age: 424485
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.35 | 200 OK | 2.2 kB |
URL HTTP/2www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.35:0
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 24 Jan 2023 18:48:55 GMT
expires: Tue, 31 Jan 2023 18:48:55 GMT
cache-control: public, max-age=604800
age: 589593
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans%3A+300%2C400%2C500%2C600%2C700%7CPlayfair+Display%3A400%2C400i%2C700%2C700i%2C900&ver=1.0.0 | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Open+Sans%3A+300%2C400%2C500%2C600%2C700%7CPlayfair+Display%3A400%2C400i%2C700%2C700i%2C900&ver=1.0.0 IP142.250.74.106:0
GET /css?family=Open+Sans%3A+300%2C400%2C500%2C600%2C700%7CPlayfair+Display%3A400%2C400i%2C700%2C700i%2C900&ver=1.0.0 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brenderlawfirm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 31 Jan 2023 14:35:26 GMT
date: Tue, 31 Jan 2023 14:35:26 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| brenderlawfirm.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.6.10 | 199.250.206.218 | 200 OK | 0 B |
URL HTTP/1.1brenderlawfirm.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.6.10 IP199.250.206.218:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.6.10 HTTP/1.1
Host: brenderlawfirm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brenderlawfirm.com/crcgroup
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 14:35:27 GMT
Server: Apache
Vary: Accept-Encoding
Last-Modified: Wed, 25 Jan 2023 00:34:52 GMT
ETag: "e926-5f30bccefa300"
Accept-Ranges: bytes
Content-Length: 59686
Cache-Control: max-age=31536000, public
Expires: Wed, 31 Jan 2024 14:35:27 GMT
Referrer-Policy: no-referrer-when-downgrade
Pragma: public
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/css
|
|
| fonts.googleapis.com/css?family=Open%20Sans:300,400,500,600,700,800,300italic,400italic,500italic,600italic,700italic,800italic%7CPlayfair%20Display:400,500,600,700,800,900,400italic,500italic,600italic,700italic,800italic,900italic&display=swap&ver=1659354544 | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Open%20Sans:300,400,500,600,700,800,300italic,400italic,500italic,600italic,700italic,800italic%7CPlayfair%20Display:400,500,600,700,800,900,400italic,500italic,600italic,700italic,800italic,900italic&display=swap&ver=1659354544 IP142.250.74.106:0
GET /css?family=Open%20Sans:300,400,500,600,700,800,300italic,400italic,500italic,600italic,700italic,800italic%7CPlayfair%20Display:400,500,600,700,800,900,400italic,500italic,600italic,700italic,800italic,900italic&display=swap&ver=1659354544 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brenderlawfirm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 31 Jan 2023 14:35:26 GMT
date: Tue, 31 Jan 2023 14:35:26 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
0.0.0.0