| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash3bbb845b153026fc5332dd4506585b57 3cad200fac28fd00f34ce6ef79373e661e188743 6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9473
Expires: Sun, 04 Dec 2022 01:33:26 GMT
Date: Sat, 03 Dec 2022 22:55:33 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash67e9370f1bf3e4946a01f346eeae8966 aaab391d1134302d718de7a0d5edbedf884633e6 27a8654fb14db88d4b2bb3b45c1b197fc498cd94143d4a68687742fa48a41358
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2615
Cache-Control: max-age=130754
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:55:33 GMT
Etag: "638b2570-1d7"
Expires: Mon, 05 Dec 2022 11:14:47 GMT
Last-Modified: Sat, 03 Dec 2022 10:31:12 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 22:18:18 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2235
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1ea206ac3c440825741687351f8c6e4e 2f38dafd8c43dcce2411a0590bc5c02cd6286735 7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15079
Expires: Sun, 04 Dec 2022 03:06:52 GMT
Date: Sat, 03 Dec 2022 22:55:33 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: FWpCDFrzonQr4BBs829YlX+dWQExS0WbEjpjebfOAgTgetPkO/gliC+atkDCopj2GDvxJ1Ti7yI=
x-amz-request-id: 7Y3JGG0D3PH3XM8X
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 22:46:44 GMT
age: 529
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:33 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/ |  66.42.40.161 | 301 Moved Permanently | 162 B |
IP66.42.40.161:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 03 Dec 2022 22:55:33 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://top1cacuoc.com/
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 22:11:19 GMT
cache-control: public,max-age=3600
age: 2654
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hasha151c326c67e1abb747847c1427db76f 80885d30ef8ba867bf33c40b861976958a27493a de2b573ee1c8af980e593352e0c331b2595f62bd4499300ace30821d20814760
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2596
Cache-Control: max-age=125674
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:55:33 GMT
Etag: "638b11ab-1d7"
Expires: Mon, 05 Dec 2022 09:50:07 GMT
Last-Modified: Sat, 03 Dec 2022 09:06:51 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 35.165.176.211 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.165.176.211:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 50NNuRTZtmn8m1FGSU8x5A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: sI0Y5PCYG4f9GBG//SJbs6Mrou0=
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashecab83d593cc540b02689be5be7abc8a 81cda579b7b9b22332b85266b0126585f3d3f73f d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10572
Expires: Sun, 04 Dec 2022 01:51:47 GMT
Date: Sat, 03 Dec 2022 22:55:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashecab83d593cc540b02689be5be7abc8a 81cda579b7b9b22332b85266b0126585f3d3f73f d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10572
Expires: Sun, 04 Dec 2022 01:51:47 GMT
Date: Sat, 03 Dec 2022 22:55:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashecab83d593cc540b02689be5be7abc8a 81cda579b7b9b22332b85266b0126585f3d3f73f d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10572
Expires: Sun, 04 Dec 2022 01:51:47 GMT
Date: Sat, 03 Dec 2022 22:55:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashecab83d593cc540b02689be5be7abc8a 81cda579b7b9b22332b85266b0126585f3d3f73f d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10572
Expires: Sun, 04 Dec 2022 01:51:47 GMT
Date: Sat, 03 Dec 2022 22:55:35 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32949ec5-eb15-4096-b713-fd83ae7aa650.jpeg | 34.120.237.76 | 200 OK | 8.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32949ec5-eb15-4096-b713-fd83ae7aa650.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb7717ff9fcf6cf3268d10312dc3fdaaf c4f05fdb231c7870b2a918198fa0809d8e8f9c89 bf3b6304a45f172653f45e1e8b4afa7da90096ca36c82b981ca6ec01ccf122a8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32949ec5-eb15-4096-b713-fd83ae7aa650.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8286
x-amzn-requestid: 6880d30e-3624-402e-819d-610e35ae27d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAAG1HIAMF6Vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-43f8e7d312f96110713a7092;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XcnZ2pTQoGkuHEPsazEI09yhI6WWbmZD6g7QYW7rDf5HsegvjdgkXg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:44:00 GMT
age: 4295
etag: "c4f05fdb231c7870b2a918198fa0809d8e8f9c89"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3af2e495-85ff-410f-8418-e683c7f84bcd.jpeg | 34.120.237.76 | 200 OK | 7.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3af2e495-85ff-410f-8418-e683c7f84bcd.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash027480c06cd67621f373c6765dafee4d 9f80bb7ca6f699d88eaec2248dec508c589fe994 f69a0d6bd6e79d8fa7f2f15df11237c0a8b04d45af3cd5870eeef86d18f553bf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3af2e495-85ff-410f-8418-e683c7f84bcd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7728
x-amzn-requestid: 9f37e7a6-1f00-4a81-9b14-962fd0b6cdf4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMEJxoAMFchQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-4a4cce217327b44525ea1e98;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ztC4S0WeA3ft_9JafrL6fInXo4jwkb0cTWUx4Z8L2uz3EWQS-d6F5A==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 22:08:25 GMT
age: 2830
etag: "9f80bb7ca6f699d88eaec2248dec508c589fe994"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb8cb98e4-6956-416c-82e2-269c1c3a9ea7.jpeg | 34.120.237.76 | 200 OK | 9.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb8cb98e4-6956-416c-82e2-269c1c3a9ea7.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash95358bd2d700ee56273f5c03bb1b0ec9 3382013402b80585d811e8df916e32c055e559b7 9bdcf882b96fbbac533a799269480cc1af0e1dd891854939e1500adf2a5d1c10
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb8cb98e4-6956-416c-82e2-269c1c3a9ea7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9447
x-amzn-requestid: 7f33035c-70b3-4efd-9bbe-0975847cb21a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltmLExfoAMFwYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc2f4-20c26c902a341f7a00b62316;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:43:16 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: PpTFuHAWhFD1MhQGFZWYpenveUsGPtRE3GkL0Dy1mSFh-EeDcUKa_w==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 22:16:34 GMT
age: 2341
etag: "3382013402b80585d811e8df916e32c055e559b7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png | 34.120.237.76 | 200 OK | 16 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash14dcca2a9c4792d835ee709bcd947402 1d702df3a64258628f4124eafd580695f2d350af da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KHd4ajJWl-8TDH5HGbkuJXI4NL6I83IwSUBKzfq85cxpyRH_LGl6OA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 07:43:43 GMT
age: 54712
etag: "1d702df3a64258628f4124eafd580695f2d350af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg | 34.120.237.76 | 200 OK | 4.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc01fe1cccdb3b672bbade6d98217ffe9 a9a529dc9894827f6243a1bf57f81caa4fe88fc2 c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:44:01 GMT
age: 4294
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5b41d2b-ab64-4a18-814e-d348d7921eca.png | 34.120.237.76 | 200 OK | 4.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5b41d2b-ab64-4a18-814e-d348d7921eca.png IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6b0065d160e7dbd17cf58f2c837b45a7 0ebefb37db37dcbf1ad421ab0cac2cccdcd83a2f 833c0a39ed1d9dcfa4a22f201d06d085e5131121810e98d5e79dd6f84e8fe436
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5b41d2b-ab64-4a18-814e-d348d7921eca.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4782
x-amzn-requestid: 98b5d5ca-7590-4756-9b92-3fb327ecc97b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsANG8koAMF_Qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-546b61a82a8b952f664346b9;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ncXSPf1et6vSgEBmWwY_PperGXmgJGEx0hlLr0lhN6XHi0RLRr6WCA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:47:05 GMT
age: 4110
etag: "0ebefb37db37dcbf1ad421ab0cac2cccdcd83a2f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash98fe7e5fd6b778bcdcc63028c3a49fbd 06b34160c344526fbe14ce41445b9fe76c0a878d d45d898dfe5bf1151557bbbc3be6e6878fbadce386136d60777b4464199173a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:55:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hashe63a3fb1ef1a4ebbbd126969d6ee68ca 8bc9c26950b3899087e25ddea159c28f57b47200 f2ec30377e239f64286ae7dde8032e4e332b6c123f7decc07126fbbcff460a69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:55:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash98fe7e5fd6b778bcdcc63028c3a49fbd 06b34160c344526fbe14ce41445b9fe76c0a878d d45d898dfe5bf1151557bbbc3be6e6878fbadce386136d60777b4464199173a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:55:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtag/js?id=G-SJP1FC2G4M | 172.217.21.168 | 200 OK | 78 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=G-SJP1FC2G4M IP172.217.21.168:0
File typeASCII text, with very long lines (22462) Hash71854513cb82e842420a245221b6dce4 9cdc2820d17203df3e9865a0f8d51f7a95ff3e53 7a8b6455cb6b0eab90f4fb098a27bdc89666df21e0243fff5854897e995815f5
GET /gtag/js?id=G-SJP1FC2G4M HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Dec 2022 22:55:35 GMT
expires: Sat, 03 Dec 2022 22:55:35 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77817
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&subset=vietnamese&ver=6.1.1 | 142.250.74.74 | 200 OK | 2.0 kB |
URL HTTP/2fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&subset=vietnamese&ver=6.1.1 IP142.250.74.74:0
Hash27180fe5afea7152bdf901c5f33ee31f 427b07b6a5910e6e9786c24ecd1b15058ed2a9bb 791437042bd20fbe6e98067dfe0c4dde46cc20ecfe77b37946afebc2caaa5b3b
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&subset=vietnamese&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 03 Dec 2022 22:55:35 GMT
date: Sat, 03 Dec 2022 22:55:35 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/14.0.0/svg/2705.svg | 192.0.77.48 | 200 OK | 482 B |
URL HTTP/2s.w.org/images/core/emoji/14.0.0/svg/2705.svg IP192.0.77.48:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (482), with no line terminators Hash212e30e47232be03033a87dc58edaa95 4d69c4a3dc57503e08b76c774135bfe83e8b1f51 1f026beb67630abcdbc341651b1c17591aa76261296a9fb118793765964eb4e9
GET /images/core/emoji/14.0.0/svg/2705.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:35 GMT
content-type: image/svg+xml
content-length: 482
last-modified: Tue, 12 Apr 2022 03:50:59 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/top1cacuoc-logo.png | 66.42.40.161 | 200 OK | 5.4 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/top1cacuoc-logo.png IP66.42.40.161:0
File typePNG image data, 281 x 100, 8-bit/color RGBA, non-interlaced\012- data Hash5ed7288390ddbfdd70416d6f712ffeb0 18b8dbcbd6b6868ca3d69e2ecbeac34cdeb6859b c9fe7f54902faa259966cece7bcae496ed999f5c31f9d7ff1ce5da379c29521e
GET /wp-content/uploads/2022/08/top1cacuoc-logo.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: image/png
content-length: 5444
last-modified: Mon, 08 Aug 2022 07:31:09 GMT
etag: "62f0bbbd-1544"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hashda9700d928847bca71f73dc9ca89bd1c 2f156a1557a7504da776ed9a82dc52563662be6f 428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:55:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2 | 142.250.74.35 | 200 OK | 12 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 11800, version 1.0\012- data Hashe36fccd06262bef92e7a9841e2202225 b907dd02819497b3942220e0aa160c167195506b 7f1c829b0c90fd664a03bb714a74f7d35d9e38ee1687104abc8ad5bd9c8ccb6c
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://top1cacuoc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11800
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:43:17 GMT
expires: Thu, 30 Nov 2023 19:43:17 GMT
cache-control: public, max-age=31536000
age: 270739
last-modified: Wed, 11 May 2022 19:25:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-includes/css/classic-themes.min.css?ver=1 | 66.42.40.161 | 200 OK | 12 kB |
URL HTTP/2top1cacuoc.com/wp-includes/css/classic-themes.min.css?ver=1 IP66.42.40.161:0
Hashbea5221df17863dcfa8141cc894e2a39 317fcbddb3817c928133c06bd5e9129120d71880 c1a122df0f2e670c10a0849b639910328bd127a698b3ce6ae59af3b68dd81038
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:35 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 03:02:09 GMT
vary: Accept-Encoding
etag: W/"6361ddb1-d9"
expires: Mon, 02 Jan 2023 22:55:35 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/ | 66.42.40.161 | 200 OK | 71 kB |
IP66.42.40.161:0
Hash4c5f6a2600f2a8ff5bbe87f74e81f869 08f399561517648ed12565905c8ae82c4c7bf72a 6ec8e8103483ba517d97936823410d525a4a3519b857ee0fa69ffe04cc595c07
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:35 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
link: <https://top1cacuoc.com/wp-json/>; rel="https://api.w.org/", <https://top1cacuoc.com/wp-json/wp/v2/pages/7>; rel="alternate"; type="application/json", <https://top1cacuoc.com/>; rel=shortlink
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/pum/pum-site-styles.css?generated=1669102242&ver=1.16.14 | 66.42.40.161 | 200 OK | 4.0 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/pum/pum-site-styles.css?generated=1669102242&ver=1.16.14 IP66.42.40.161:0
Hashde2dd9960687a61c20404259c5170790 69143b9966571a2b406884eba93155d09ca93a12 ae81cccd773afc900e8a8708f073c302669d529f3afd2c1759d2dfe97040a88b
GET /wp-content/uploads/pum/pum-site-styles.css?generated=1669102242&ver=1.16.14 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:35 GMT
content-type: text/css
last-modified: Tue, 22 Nov 2022 07:30:42 GMT
vary: Accept-Encoding
etag: W/"637c7aa2-4927"
expires: Mon, 02 Jan 2023 22:55:35 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/themes/jnews/assets/css/darkmode.css?ver=10.8.1 | 66.42.40.161 | 200 OK | 23 kB |
URL HTTP/2top1cacuoc.com/wp-content/themes/jnews/assets/css/darkmode.css?ver=10.8.1 IP66.42.40.161:0
Hash716863dbcd36e2803b5f6759f8411e60 4494ee503b714a175d64b754b4486b677a9e68f3 b53d50cfc5bb3f68ee9438e5eb2737ed124e3a132baf4d7d83db68e1d448d3e9
GET /wp-content/themes/jnews/assets/css/darkmode.css?ver=10.8.1 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: text/css
last-modified: Fri, 18 Nov 2022 02:44:22 GMT
vary: Accept-Encoding
etag: W/"6376f186-b6ae"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hashbaaba92c2ccd740f080a25a9ea5cb3ad 3322d5a9fb0b3a2ec83247eac9865234cbcefece 5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:55:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hashbaaba92c2ccd740f080a25a9ea5cb3ad 3322d5a9fb0b3a2ec83247eac9865234cbcefece 5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:55:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| top1cacuoc.com/wp-content/themes/jnews/assets/css/elementor-frontend.css?ver=10.8.1 | 66.42.40.161 | 200 OK | 12 kB |
URL HTTP/2top1cacuoc.com/wp-content/themes/jnews/assets/css/elementor-frontend.css?ver=10.8.1 IP66.42.40.161:0
Hashd24391c8214557625b33de4712313cb4 6ef62a9b88c6f4fb2d2592a6d29acc40557c4ae9 98a495852781d60ec83444894fd7df66dac530f31583c45b716f0a002967a4b0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/jnews/assets/css/elementor-frontend.css?ver=10.8.1 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: text/css
last-modified: Fri, 18 Nov 2022 02:44:22 GMT
vary: Accept-Encoding
etag: W/"6376f186-2a9"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hashbaaba92c2ccd740f080a25a9ea5cb3ad 3322d5a9fb0b3a2ec83247eac9865234cbcefece 5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 22:55:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://top1cacuoc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 271302
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2 | 142.250.74.35 | 200 OK | 5.5 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 5548, version 1.0\012- data Hashcdaab83619fcacd4027a77c99dd51e69 9e6eae8554f8cc2309b2dae2d9fa217e34eed6a4 4ec57f2a80b91090971b83970230ca09ab3568c5f5b224896ca9aa6180a76aa9
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://top1cacuoc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5548
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 20:55:53 GMT
expires: Thu, 30 Nov 2023 20:55:53 GMT
cache-control: public, max-age=31536000
age: 266383
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2 | 142.250.74.35 | 200 OK | 5.6 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 5604, version 1.0\012- data Hash7cda2cfee99d697daf8c14819d9004eb 76f4002863493c93454a9f17424942f321287cba 0948409a22b5979aa7e1ec20da9e61f12e7d403800b541ece053881bd2542b70
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://top1cacuoc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:55:02 GMT
expires: Thu, 30 Nov 2023 19:55:02 GMT
cache-control: public, max-age=31536000
age: 270034
last-modified: Wed, 11 May 2022 19:24:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/elementor/css/post-267.css?ver=1665453860 | 66.42.40.161 | 200 OK | 6.4 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/elementor/css/post-267.css?ver=1665453860 IP66.42.40.161:0
Hashc35b60afae36e2a98d27c662788a4723 711e44567aa1c6ac1c84c87a99e5128d61486bf2 d3d0f3b1176bfef04b43be2261e8410142cb07d0c9857565d051f8bf169fe4eb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/elementor/css/post-267.css?ver=1665453860 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: text/css
last-modified: Tue, 11 Oct 2022 02:04:20 GMT
vary: Accept-Encoding
etag: W/"6344cf24-2060"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/plugins/floating-ads-bottom/images/close.png | 66.42.40.161 | 200 OK | 718 B |
URL HTTP/2top1cacuoc.com/wp-content/plugins/floating-ads-bottom/images/close.png IP66.42.40.161:0
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash86a65311d3a85713a94e430596145106 e5d90fb9f6c749809e69d7c5168ef2ef860425bf d50a82cbf1b41068353ddf2589695da59293e5e0d0081e432acc5a83df3428b9
GET /wp-content/plugins/floating-ads-bottom/images/close.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: image/png
content-length: 718
last-modified: Mon, 10 Oct 2022 04:11:04 GMT
etag: "63439b58-2ce"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/10/728-x-90-1.gif | 66.42.40.161 | 200 OK | 179 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/10/728-x-90-1.gif IP66.42.40.161:0
File typeGIF image data, version 89a, 728 x 90\012- data Size179 kB (179078 bytes) Hashbb5b4f12dd0f28a4205cac5af10b8b4d ddb6d0c4cf97dfecdf9af137e368408182d5e62d 9cf4b1d57b81f78a69a122277616709bb9d69b3e8f5d951aa4143615a215a163
GET /wp-content/uploads/2022/10/728-x-90-1.gif HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: image/gif
content-length: 179078
last-modified: Mon, 10 Oct 2022 05:53:55 GMT
etag: "6343b373-2bb86"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/1.png | 66.42.40.161 | 301 Moved Permanently | 162 B |
URL HTTP/1.1top1cacuoc.com/wp-content/uploads/2022/08/1.png IP66.42.40.161:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/uploads/2022/08/1.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 03 Dec 2022 22:55:37 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://top1cacuoc.com/wp-content/uploads/2022/08/1.png
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
|
|
| top1cacuoc.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 | 66.42.40.161 | 200 OK | 13 kB |
URL HTTP/2top1cacuoc.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 IP66.42.40.161:0
Hash570600d37d0395c711ae90b58e23376e 8ccb33fd35609c5c6d40589396fd03e72389e6cf bb895baf461e675fcc7adb76e513b3ffcd109be489318c8177ff2dd8a8f9afc1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:35 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 03:01:30 GMT
vary: Accept-Encoding
etag: W/"6374528a-172a9"
expires: Mon, 02 Jan 2023 22:55:35 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 | 66.42.40.161 | 200 OK | 13 kB |
URL HTTP/2top1cacuoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 IP66.42.40.161:0
Hash7830bce97033a3344262d193bc24b9e2 0405ed359e2d7495ba096d9392d3525c865eb358 2800bc792b453eeb58ffd5e1203406487bec30a2249faee5aa1c1f7d655ee42d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: text/css
last-modified: Mon, 10 Oct 2022 04:11:26 GMT
vary: Accept-Encoding
etag: W/"63439b6e-e238"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 | 66.42.40.161 | 200 OK | 5.2 kB |
URL HTTP/2top1cacuoc.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 IP66.42.40.161:0
Hasha68d67b710019549e978d17295738249 6716a239af18fb5d847fdca101e9891a3ed43387 f07de3dfcf53637a116d361b364dd3f4a394724a378388e54b37d178046e5f66
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:35 GMT
content-type: application/javascript
last-modified: Tue, 12 Apr 2022 05:56:23 GMT
vary: Accept-Encoding
etag: W/"62551487-48b9"
expires: Mon, 02 Jan 2023 22:55:35 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/themes/jnews/assets/dist/frontend.min.css?ver=10.8.1 | 66.42.40.161 | 200 OK | 94 kB |
URL HTTP/2top1cacuoc.com/wp-content/themes/jnews/assets/dist/frontend.min.css?ver=10.8.1 IP66.42.40.161:0
Hashbad014a923cbf4fb96dda8685958cbec d8a6682e7de44f1125ded838fc8ec31b4cdf3582 57fb6bc9df0fbacc6b2219913d72a4defa676bae06f9388f0e996803d28ec86e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/jnews/assets/dist/frontend.min.css?ver=10.8.1 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:35 GMT
content-type: text/css
last-modified: Fri, 18 Nov 2022 02:44:22 GMT
vary: Accept-Encoding
etag: W/"6376f186-93054"
expires: Mon, 02 Jan 2023 22:55:35 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 | 66.42.40.161 | 200 OK | 471 B |
URL HTTP/2top1cacuoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 IP66.42.40.161:0
Hash385d4e2e993f3aa57a582973b083d236 ffa571e8d5d4c9f5cb6ac20df6189decdc71e46f 57ddfec8ae2c9d00d53c649e33c64e8a4dc9c667c34d71e7e029cf5606ea16b8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: text/css
last-modified: Mon, 10 Oct 2022 04:11:26 GMT
vary: Accept-Encoding
etag: W/"63439b6e-29d"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/14.0.0/svg/1f396.svg | 192.0.77.48 | 200 OK | 1.0 kB |
URL HTTP/2s.w.org/images/core/emoji/14.0.0/svg/1f396.svg IP192.0.77.48:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1044), with no line terminators Hash6ca609cb5fe0c1a5a74633567c2e743f fb6339d9bfefef2de55974c03add5648182c5f8d db06d907f780c0ca56b7ff9da2375a3e93da7d1fcd4abc989d252f30cebab4b3
GET /images/core/emoji/14.0.0/svg/1f396.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/svg+xml
content-length: 1044
last-modified: Tue, 12 Apr 2022 03:47:50 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/10/CMD368-Web-Blog-Design-VIET-728x90-1.gif | 66.42.40.161 | 200 OK | 245 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/10/CMD368-Web-Blog-Design-VIET-728x90-1.gif IP66.42.40.161:0
File typeGIF image data, version 89a, 728 x 90\012- data Size245 kB (244665 bytes) Hash4e80da6f6f0ee59c15c4c60c54d70030 b6a9375f216c5140e1e3ce4c2f4f4c8a4dbea2ad 618d0ee6c82d87efc9b84727202f727b8787f597d20b2518c9620fa443f0f4d5
GET /wp-content/uploads/2022/10/CMD368-Web-Blog-Design-VIET-728x90-1.gif HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: image/gif
content-length: 244665
last-modified: Fri, 07 Oct 2022 07:25:57 GMT
etag: "633fd485-3bbb9"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/14.0.0/svg/2b50.svg | 192.0.77.48 | 200 OK | 870 kB |
URL HTTP/2s.w.org/images/core/emoji/14.0.0/svg/2b50.svg IP192.0.77.48:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (554), with no line terminators Size870 kB (870160 bytes) Hashaf9ea7c2b9869be94324294a6a2dccac 9ecd58dd602c657bd1680fa3f01eac82f7e93d4c 3ea3a01e8580fbc42367f4e9ed021b73b3cc0bd82aaf8ef4f8761bd5ac925325
GET /images/core/emoji/14.0.0/svg/2b50.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:35 GMT
content-type: image/svg+xml
last-modified: Tue, 12 Apr 2022 03:50:59 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/11/728x90-1.gif | 66.42.40.161 | 200 OK | 441 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/11/728x90-1.gif IP66.42.40.161:0
File typeGIF image data, version 89a, 728 x 90\012- data Size441 kB (441385 bytes) Hash9b394487097c59454850e85a59d02440 b4f0d229a4590265d694ba2796b02a0b6d425b41 3af7e003cd05c922fef87a673d1fa66a00cfb85a3b4349424dbe0531f3f21c13
GET /wp-content/uploads/2022/11/728x90-1.gif HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: image/gif
content-length: 441385
last-modified: Wed, 30 Nov 2022 07:18:14 GMT
etag: "638703b6-6bc29"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css | 66.42.40.161 | 200 OK | 5.4 kB |
URL HTTP/2top1cacuoc.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css IP66.42.40.161:0
Hasheba5b468a51cd447db5a582645c6e656 d2dc58ad2ed160b785df6508710256e6926c0c70 b911df1cc6f534e99ee13bd539e541768cdd66d8f3e350671aec23a2f620ccc9
GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: text/css
last-modified: Mon, 10 Oct 2022 04:11:26 GMT
vary: Accept-Encoding
etag: W/"63439b6e-2dff"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.7.8 | 66.42.40.161 | 200 OK | 92 kB |
URL HTTP/2top1cacuoc.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.7.8 IP66.42.40.161:0
Hash669bd3ff6fb3cd31f40bc36ff7ab4a17 f2590d55aadb65398dac7cfbf2389a2240fe01dc e7b08c945b8fbb41c2861616b43fb8d8f2c9f6cda1d0b54f5d84ac70707cd63f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.7.8 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:35 GMT
content-type: text/css
last-modified: Mon, 10 Oct 2022 04:11:26 GMT
vary: Accept-Encoding
etag: W/"63439b6e-1a78c"
expires: Mon, 02 Jan 2023 22:55:35 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 66.42.40.161 | 200 OK | 31 kB |
URL HTTP/2top1cacuoc.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP66.42.40.161:0
Hash2bdf6c79d7f6e46087e54a57e12cc4ef 25e36739ba3002fbb13647352e43ad507efe0d9a 497c8c99c2a06e49688f9685f27f83d747f5f014f5925ca882f86e4b5d7df672
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 03:02:09 GMT
vary: Accept-Encoding
etag: W/"6361ddb1-15e54"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/elementor/css/global.css?ver=1665375346 | 66.42.40.161 | 200 OK | 94 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/elementor/css/global.css?ver=1665375346 IP66.42.40.161:0
Hash55c95c86df1c96bc876287ece19775cc 5ce6485cee2ba2b0a0e023512a865298b9c9f3c8 2f39ad97d60eb5a40faf6ccfb1b031f30bc074b31bbac7fcb75f399f4daeec37
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/elementor/css/global.css?ver=1665375346 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:35 GMT
content-type: text/css
last-modified: Mon, 10 Oct 2022 04:15:46 GMT
vary: Accept-Encoding
etag: W/"63439c72-2503"
expires: Mon, 02 Jan 2023 22:55:35 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/themes/jnews/assets/dist/font/fontawesome-webfont.woff2 | 66.42.40.161 | 200 OK | 77 kB |
URL HTTP/2top1cacuoc.com/wp-content/themes/jnews/assets/dist/font/fontawesome-webfont.woff2 IP66.42.40.161:0
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/jnews/assets/dist/font/fontawesome-webfont.woff2 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://top1cacuoc.com/wp-content/themes/jnews/assets/dist/frontend.min.css?ver=10.8.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: application/octet-stream
content-length: 77160
last-modified: Fri, 18 Nov 2022 02:44:22 GMT
etag: "6376f186-12d68"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/8.png | 66.42.40.161 | 301 Moved Permanently | 162 B |
URL HTTP/1.1top1cacuoc.com/wp-content/uploads/2022/08/8.png IP66.42.40.161:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/uploads/2022/08/8.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 03 Dec 2022 22:55:37 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://top1cacuoc.com/wp-content/uploads/2022/08/8.png
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
|
|
| top1cacuoc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 66.42.40.161 | 200 OK | 4.3 kB |
URL HTTP/2top1cacuoc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP66.42.40.161:0
Hashb01bf003776a51f349848f3207838fd6 b4be17f64db2cfbbdfa64c900b4b07b2e19d2c74 7a5a2459e0ce07f8e30a3ab02b420d017a49fb681b4276ac3856feaf1a4a6b5e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
vary: Accept-Encoding
etag: W/"5fb4e3fe-2bd8"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/themes/jnews/style.css?ver=10.8.1 | 66.42.40.161 | 200 OK | 454 B |
URL HTTP/2top1cacuoc.com/wp-content/themes/jnews/style.css?ver=10.8.1 IP66.42.40.161:0
Hashef875030ecc68fdccc88e24d2b110748 469fea09bf9d62bdd7c7323a024bda6c9b26ae01 b08efd04e2a3379dfa51d5e39c6e6b651c8e600f64cc741cedc25c09775735c1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/jnews/style.css?ver=10.8.1 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: text/css
last-modified: Fri, 18 Nov 2022 02:44:22 GMT
vary: Accept-Encoding
etag: W/"6376f186-1ab"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/cmd-150x150-1.png | 66.42.40.161 | 200 OK | 19 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/cmd-150x150-1.png IP66.42.40.161:0
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data Hashc4666eadb61f33b0a91cb3ae28423df5 2fa802736d72cd0870df2b467c3cd2bbeb704310 8f7e5e889b4eded10e28cb08a04c58b19325a638cf085ef59db4aa67ac18c489
GET /wp-content/uploads/2022/08/cmd-150x150-1.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 18926
last-modified: Mon, 08 Aug 2022 09:03:35 GMT
etag: "62f0d167-49ee"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/%E2%80%94Pngtree%E2%80%94red-gift_4642106-75x75.png | 66.42.40.161 | 200 OK | 6.7 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/%E2%80%94Pngtree%E2%80%94red-gift_4642106-75x75.png IP66.42.40.161:0
File typePNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced\012- data Hash8b540cc9f0b0ed43091adab1c7dda5f5 de60eeba8187ceaa084ae63095ae53173e344b41 1ca1e86d2dc6d8b46694878a114bcb6c5496cf94844e3a0ffe156423524dd386
GET /wp-content/uploads/2022/08/%E2%80%94Pngtree%E2%80%94red-gift_4642106-75x75.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 6711
last-modified: Sat, 06 Aug 2022 03:45:14 GMT
etag: "62ede3ca-1a37"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/RobertPiresCMD3680176-small-2-150x150.png | 66.42.40.161 | 200 OK | 30 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/RobertPiresCMD3680176-small-2-150x150.png IP66.42.40.161:0
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data Hash8bfee9f1d2df6fccb7e55babfd2df61f 424c7f9c22fbf8fe00e3603a33c2d84fe1fb335e 712acefed967fabaef7dea84cad458cf3b0c095b99b6348735650974c01809ec
GET /wp-content/uploads/2022/08/RobertPiresCMD3680176-small-2-150x150.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 30304
last-modified: Sat, 06 Aug 2022 04:03:37 GMT
etag: "62ede819-7660"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/10/Capture-1-150x150.png | 66.42.40.161 | 200 OK | 19 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/10/Capture-1-150x150.png IP66.42.40.161:0
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data Hash034fe1be2b104b3eb5df8158f1fb0096 994562269b3ec8caeb6fe749e9db92eb16bef08c 5da986a5887491ca2e47b5f2e47c7c779e122f4922fb27cc298c4227f41bbbbf
GET /wp-content/uploads/2022/10/Capture-1-150x150.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 19120
last-modified: Sat, 22 Oct 2022 11:29:03 GMT
etag: "6353d3ff-4ab0"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/top1cacuoc-5-150x150.png | 66.42.40.161 | 200 OK | 26 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/top1cacuoc-5-150x150.png IP66.42.40.161:0
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data Hash58d2c38975b3574b49f79df8f0ded5af a228db356f21a1b819d2275e24c4b6cafcdcefa8 fe34c2896b09a9f3aa7acee50b081109cfc0b9dd011188bcedf08c426dc37a67
GET /wp-content/uploads/2022/08/top1cacuoc-5-150x150.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 25452
last-modified: Mon, 08 Aug 2022 06:57:48 GMT
etag: "62f0b3ec-636c"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/themes/jnews/assets/dist/font/jegicon.woff | 66.42.40.161 | 200 OK | 7.1 kB |
URL HTTP/2top1cacuoc.com/wp-content/themes/jnews/assets/dist/font/jegicon.woff IP66.42.40.161:0
File typeWeb Open Font Format, CFF, length 7144, version 1.0\012- data Hash80f6e7a7a6eb44255aeb06a2d5b5ea41 4ded570e00c9c96cc3cf18e770903cb60e360ce4 e2d3127da85763e024971c6192f78becbdf85db231b3d088c9f8b3777d444ede
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/jnews/assets/dist/font/jegicon.woff HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://top1cacuoc.com/wp-content/themes/jnews/assets/dist/frontend.min.css?ver=10.8.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: application/font-woff
content-length: 7144
last-modified: Fri, 18 Nov 2022 02:44:22 GMT
etag: "6376f186-1be8"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/top1cacuoc-head.png | 66.42.40.161 | 200 OK | 125 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/top1cacuoc-head.png IP66.42.40.161:0
File typePNG image data, 665 x 661, 8-bit colormap, non-interlaced\012- data Size125 kB (125350 bytes) Hash4117505ef47bbd5f3f7f251e06cfbb44 fe59ccb79bbccb2cd7553ebe0f844c2bdffdba41 30d61a3c157b6f38c3b9c5204b10e29e33e77104d661afb47bfa6a7003436abc
GET /wp-content/uploads/2022/08/top1cacuoc-head.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 125350
last-modified: Mon, 08 Aug 2022 07:33:44 GMT
etag: "62f0bc58-1e9a6"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| region1.google-analytics.com/g/collect?v=2&tid=G-SJP1FC2G4M>m=2oebu0&_p=435280606&cid=866848430.1670108135&ul=en-us&sr=1280x1024&_s=1&sid=1670108135&sct=1&seg=0&dl=https%3A%2F%2Ftop1cacuoc.com%2F&dt=Top%2015%2B%20Nh%C3%A0%20C%C3%A1i%20Uy%20T%C3%ADn%20%F0%9F%8E%96%EF%B8%8F%20Website%20C%C3%A1%20C%C6%B0%E1%BB%A3c%20Vi%E1%BB%87t%20Nam%20%5BUpdate%5D&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 | 216.239.34.36 | 204 No Content | 0 B |
URL HTTP/2region1.google-analytics.com/g/collect?v=2&tid=G-SJP1FC2G4M>m=2oebu0&_p=435280606&cid=866848430.1670108135&ul=en-us&sr=1280x1024&_s=1&sid=1670108135&sct=1&seg=0&dl=https%3A%2F%2Ftop1cacuoc.com%2F&dt=Top%2015%2B%20Nh%C3%A0%20C%C3%A1i%20Uy%20T%C3%ADn%20%F0%9F%8E%96%EF%B8%8F%20Website%20C%C3%A1%20C%C6%B0%E1%BB%A3c%20Vi%E1%BB%87t%20Nam%20%5BUpdate%5D&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 IP216.239.34.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-SJP1FC2G4M>m=2oebu0&_p=435280606&cid=866848430.1670108135&ul=en-us&sr=1280x1024&_s=1&sid=1670108135&sct=1&seg=0&dl=https%3A%2F%2Ftop1cacuoc.com%2F&dt=Top%2015%2B%20Nh%C3%A0%20C%C3%A1i%20Uy%20T%C3%ADn%20%F0%9F%8E%96%EF%B8%8F%20Website%20C%C3%A1%20C%C6%B0%E1%BB%A3c%20Vi%E1%BB%87t%20Nam%20%5BUpdate%5D&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://top1cacuoc.com
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://top1cacuoc.com
date: Sat, 03 Dec 2022 22:55:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/11/33BET-728x90-9.gif | 66.42.40.161 | 200 OK | 6.3 MB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/11/33BET-728x90-9.gif IP66.42.40.161:0
File typeGIF image data, version 89a, 728 x 90\012- data Size6.3 MB (6309959 bytes) Hashd84bd29a06de19aacf550c6981f7ea48 c859c812b3d795389c50acd7e553ab387eabb0a7 934ebc41ab4edd0973ed0f7e7aa326df50a6ab1dd1767d68fbf03ace3ec31c14
GET /wp-content/uploads/2022/11/33BET-728x90-9.gif HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/gif
content-length: 6309959
last-modified: Wed, 23 Nov 2022 09:29:33 GMT
etag: "637de7fd-604847"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 | 66.42.40.161 | 200 OK | 77 kB |
URL HTTP/2top1cacuoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 IP66.42.40.161:0
File typeWeb Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data Hashf7307680c7fe85959f3ecf122493ea7d fce0da592a3e536d6d5df5b50cb513398d8c5161 43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://top1cacuoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: application/octet-stream
content-length: 76764
last-modified: Mon, 10 Oct 2022 04:11:26 GMT
etag: "63439b6e-12bdc"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/09/8X_BET_ICON_02-final-01-1024x1002.png | 66.42.40.161 | 200 OK | 658 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/09/8X_BET_ICON_02-final-01-1024x1002.png IP66.42.40.161:0
File typePNG image data, 1024 x 1002, 8-bit/color RGBA, non-interlaced\012- data Size658 kB (658453 bytes) Hashb2f3fd02f256cbf287435fad67575f35 4db60b6ff041c5b26b8bcafa101ef91fca8a3ed5 b03737b75614bdba3aff21e02cbe51e13d1612d6369a15b944444cf92248e79e
GET /wp-content/uploads/2022/09/8X_BET_ICON_02-final-01-1024x1002.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 658453
last-modified: Thu, 22 Sep 2022 08:48:39 GMT
etag: "632c2167-a0c15"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/10/logo.png | 66.42.40.161 | 200 OK | 507 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/10/logo.png IP66.42.40.161:0
File typePNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced\012- data Size507 kB (507247 bytes) Hash021a6c33a9a9c19da2f50c7311e9c85d f19ef436665b007cf1e0ef55107828b2c1b50f68 4b9bc5109ce0473e82ad1bd0e44860a32bf0802caa917d4fa2a43e446fbd4adc
GET /wp-content/uploads/2022/10/logo.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 507247
last-modified: Sat, 22 Oct 2022 11:23:25 GMT
etag: "6353d2ad-7bd6f"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/1.png | 66.42.40.161 | 200 OK | 4.0 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/1.png IP66.42.40.161:0
File typePNG image data, 100 x 80, 8-bit/color RGBA, non-interlaced\012- data Hash5dc262218c596f66ba7ec4d3443c8d07 5bc7db1894250238878885bde18c8c91df369011 da783e9336c65c3d31cc04186e152b26464771d3ca4d1ede446de8f6569128a6
GET /wp-content/uploads/2022/08/1.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 4018
last-modified: Mon, 08 Aug 2022 03:18:55 GMT
etag: "62f0809f-fb2"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/2.png | 66.42.40.161 | 200 OK | 4.4 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/2.png IP66.42.40.161:0
File typePNG image data, 100 x 80, 8-bit/color RGBA, non-interlaced\012- data Hash38164e32b7fb5d20fda1c38b7611c388 b36416922c530d0d865a9caeedc5e0d237eeb515 cf34cc5957864a0835cd3216bc4244a5ff006b2d5160a4aaba0ca6dcb0353216
GET /wp-content/uploads/2022/08/2.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 4433
last-modified: Mon, 08 Aug 2022 03:42:13 GMT
etag: "62f08615-1151"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/3.png | 66.42.40.161 | 200 OK | 4.6 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/3.png IP66.42.40.161:0
File typePNG image data, 100 x 80, 8-bit/color RGBA, non-interlaced\012- data Hash785876e73162293bb044e459ae06c93d f44415951568620582af541852f6776170a2204d 9f3502197a174bcce75082e41d7eae16231d9443aca60601371d4ac59b906499
GET /wp-content/uploads/2022/08/3.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 4601
last-modified: Mon, 08 Aug 2022 03:42:14 GMT
etag: "62f08616-11f9"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/4.png | 66.42.40.161 | 200 OK | 4.3 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/4.png IP66.42.40.161:0
File typePNG image data, 100 x 80, 8-bit/color RGBA, non-interlaced\012- data Hash843d5c859d8d9cfb5c05960f3cf97d27 03c35942e852a56c42e83af809e73e6c722d1d2c 108995421f4493df1a236fd09823b4707f9686da370b8c533d80b95a91adf3a6
GET /wp-content/uploads/2022/08/4.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 4267
last-modified: Mon, 08 Aug 2022 03:42:15 GMT
etag: "62f08617-10ab"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/5.png | 66.42.40.161 | 200 OK | 4.6 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/5.png IP66.42.40.161:0
File typePNG image data, 100 x 80, 8-bit/color RGBA, non-interlaced\012- data Hash37954c7fd24b7e89e538cfaf54e86652 79f0b90ba085c35ea3b469059f509c37ad8063f8 e408c337a1eca9343603a34d392e39043e164e4403c88f8590e6bfe0d84352dc
GET /wp-content/uploads/2022/08/5.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 4572
last-modified: Mon, 08 Aug 2022 03:42:16 GMT
etag: "62f08618-11dc"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/6.png | 66.42.40.161 | 200 OK | 4.6 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/6.png IP66.42.40.161:0
File typePNG image data, 100 x 80, 8-bit/color RGBA, non-interlaced\012- data Hash30da51eb5d324d1b1e4317bd21c3562d c2cd9f6ffa96f4c8153d2c4efe73d94d00e73629 93505879791c7693747b09a1def4a2ecf62ead05c379b246db521600cded1cbc
GET /wp-content/uploads/2022/08/6.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 4633
last-modified: Mon, 08 Aug 2022 03:42:18 GMT
etag: "62f0861a-1219"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/7.png | 66.42.40.161 | 200 OK | 4.3 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/7.png IP66.42.40.161:0
File typePNG image data, 100 x 80, 8-bit/color RGBA, non-interlaced\012- data Hashacab0132d5e365c4b7d0d53b8b1072e0 9ba6d3344482cbdf50189e862e3001082ac5d84f d7a370d9e58844aa3c7f5a50c5b9930c57be5cdf420948c3e60e110b3d65e004
GET /wp-content/uploads/2022/08/7.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga_SJP1FC2G4M=GS1.1.1670108135.1.0.1670108135.0.0.0; _ga=GA1.1.866848430.1670108135
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 4301
last-modified: Mon, 08 Aug 2022 03:42:18 GMT
etag: "62f0861a-10cd"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/8.png | 66.42.40.161 | 200 OK | 4.7 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/8.png IP66.42.40.161:0
File typePNG image data, 100 x 80, 8-bit/color RGBA, non-interlaced\012- data Hashd4b802b7324ffa11a590fb4b88b7c545 c2c8ed5a531fcb902728d33e3ea7a9b0505fee71 f13e7d1efe7a4e813eff8a2b2fceea3633de54eebfd849431ca8f9e5a362804c
GET /wp-content/uploads/2022/08/8.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga_SJP1FC2G4M=GS1.1.1670108135.1.0.1670108135.0.0.0; _ga=GA1.1.866848430.1670108135
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 4688
last-modified: Mon, 08 Aug 2022 03:42:19 GMT
etag: "62f0861b-1250"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/9.png | 66.42.40.161 | 200 OK | 4.6 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/9.png IP66.42.40.161:0
File typePNG image data, 100 x 80, 8-bit/color RGBA, non-interlaced\012- data Hashee5988f1290aef5104b4d3e246dff923 8b8909ca6fba9e6c9b994ed496fb0f7416edd8a5 698067de10ef08930b277491493f9cf58f4ac38481680fb27309ce1b241feca9
GET /wp-content/uploads/2022/08/9.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga_SJP1FC2G4M=GS1.1.1670108135.1.0.1670108135.0.0.0; _ga=GA1.1.866848430.1670108135
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 4582
last-modified: Mon, 08 Aug 2022 03:42:20 GMT
etag: "62f0861c-11e6"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/10.png | 66.42.40.161 | 200 OK | 4.5 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/10.png IP66.42.40.161:0
File typePNG image data, 100 x 80, 8-bit/color RGBA, non-interlaced\012- data Hash5fb5ffc59cfa3d3399456eeb14a02de2 025efc2a811b83ec9af2ac6e9995a9e1b3b09d74 7fc686c4c957da49c9b018c87f3cef474f9617cee556caaf7baa783fa763bbc9
GET /wp-content/uploads/2022/08/10.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga_SJP1FC2G4M=GS1.1.1670108135.1.0.1670108135.0.0.0; _ga=GA1.1.866848430.1670108135
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 4549
last-modified: Mon, 08 Aug 2022 03:42:21 GMT
etag: "62f0861d-11c5"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/11/popup-17.png | 66.42.40.161 | 200 OK | 26 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/11/popup-17.png IP66.42.40.161:0
File typePNG image data, 420 x 180, 8-bit/color RGBA, non-interlaced\012- data Hashd11be94c954c5e02c6ce8c7ebfed8a2c 52ed3174ad5c7c2dbf247c8de9a9d6596a154de5 c7e38e25738f31076d1e8af4cb996a3cf2e490414657aa1c422de80613344875
GET /wp-content/uploads/2022/11/popup-17.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Cookie: _ga_SJP1FC2G4M=GS1.1.1670108135.1.0.1670108135.0.0.0; _ga=GA1.1.866848430.1670108135
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: image/png
content-length: 26429
last-modified: Tue, 22 Nov 2022 07:28:50 GMT
etag: "637c7a32-673d"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/stadium2-scaled.jpg | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/stadium2-scaled.jpg IP66.42.40.161:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2022/08/stadium2-scaled.jpg HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: image/jpeg
content-length: 237272
last-modified: Tue, 09 Aug 2022 01:53:38 GMT
etag: "62f1be22-39ed8"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.110 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.110:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 03 Dec 2022 22:41:08 GMT
expires: Sun, 04 Dec 2022 00:41:08 GMT
cache-control: public, max-age=7200
age: 871
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/cropped-logo-5-192x192.png | 66.42.40.161 | 200 OK | 7.4 kB |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/cropped-logo-5-192x192.png IP66.42.40.161:0
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hash6053ab7d47800331540f81c00cc78129 3d263c73daa12475c53982831243f4d3769a4def 8041ccd556d76c3712c2d323a765d3a146490f440d87f5389449346faa999867
GET /wp-content/uploads/2022/08/cropped-logo-5-192x192.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Cookie: _ga_SJP1FC2G4M=GS1.1.1670108135.1.0.1670108135.0.0.0; _ga=GA1.1.866848430.1670108135
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:39 GMT
content-type: image/png
content-length: 7426
last-modified: Thu, 18 Aug 2022 09:13:25 GMT
etag: "62fe02b5-1d02"
expires: Mon, 02 Jan 2023 22:55:39 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/2022/08/cropped-logo-5-32x32.png | 66.42.40.161 | 200 OK | 403 B |
URL HTTP/2top1cacuoc.com/wp-content/uploads/2022/08/cropped-logo-5-32x32.png IP66.42.40.161:0
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data Hash32eeba4b2495905c39b72faa882ac5cf 588bbc9ada75b57407ba6366f1f238eaf403c9fa e30740808c64ee700d46e1e52ec53c840b8edf2e86f03470656c1f73efbba16f
GET /wp-content/uploads/2022/08/cropped-logo-5-32x32.png HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Cookie: _ga_SJP1FC2G4M=GS1.1.1670108135.1.0.1670108135.0.0.0; _ga=GA1.1.866848430.1670108135
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:39 GMT
content-type: image/png
content-length: 403
last-modified: Thu, 18 Aug 2022 09:13:25 GMT
etag: "62fe02b5-193"
expires: Mon, 02 Jan 2023 22:55:39 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/plugins/elementor/assets/js/toggle.933918840481dcc64242.bundle.min.js | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-content/plugins/elementor/assets/js/toggle.933918840481dcc64242.bundle.min.js IP66.42.40.161:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/js/toggle.933918840481dcc64242.bundle.min.js HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Cookie: _ga_SJP1FC2G4M=GS1.1.1670108135.1.0.1670108135.0.0.0; _ga=GA1.1.866848430.1670108135
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: application/javascript
last-modified: Mon, 10 Oct 2022 04:11:26 GMT
vary: Accept-Encoding
etag: W/"63439b6e-ec3"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 IP66.42.40.161:0
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: text/css
last-modified: Mon, 10 Oct 2022 04:11:26 GMT
vary: Accept-Encoding
etag: W/"63439b6e-2a3"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/elementor/css/post-5.css?ver=1665375346 | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-content/uploads/elementor/css/post-5.css?ver=1665375346 IP66.42.40.161:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/elementor/css/post-5.css?ver=1665375346 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:35 GMT
content-type: text/css
last-modified: Mon, 10 Oct 2022 04:15:46 GMT
vary: Accept-Encoding
etag: W/"63439c72-45d"
expires: Mon, 02 Jan 2023 22:55:35 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.7.8 | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.7.8 IP66.42.40.161:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.7.8 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: text/css
last-modified: Mon, 10 Oct 2022 04:11:26 GMT
vary: Accept-Encoding
etag: W/"63439b6e-4824"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/elementor/css/post-7.css?ver=1669288034 | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-content/uploads/elementor/css/post-7.css?ver=1669288034 IP66.42.40.161:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/elementor/css/post-7.css?ver=1669288034 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:35 GMT
content-type: text/css
last-modified: Thu, 24 Nov 2022 11:07:14 GMT
vary: Accept-Encoding
etag: W/"637f5062-d5b9"
expires: Mon, 02 Jan 2023 22:55:35 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP66.42.40.161:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 03:02:09 GMT
vary: Accept-Encoding
etag: W/"6361ddb1-53c0"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.8 | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.8 IP66.42.40.161:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.8 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: application/javascript
last-modified: Mon, 10 Oct 2022 04:11:26 GMT
vary: Accept-Encoding
etag: W/"63439b6e-9e41"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-includes/js/comment-reply.min.js?ver=6.1.1 | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-includes/js/comment-reply.min.js?ver=6.1.1 IP66.42.40.161:0
GET /wp-includes/js/comment-reply.min.js?ver=6.1.1 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: application/javascript
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
vary: Accept-Encoding
etag: W/"625095f6-ba5"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/uploads/pum/pum-site-scripts.js?defer&generated=1669102242&ver=1.16.14 | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-content/uploads/pum/pum-site-scripts.js?defer&generated=1669102242&ver=1.16.14 IP66.42.40.161:0
GET /wp-content/uploads/pum/pum-site-scripts.js?defer&generated=1669102242&ver=1.16.14 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: application/javascript
last-modified: Tue, 22 Nov 2022 07:30:42 GMT
vary: Accept-Encoding
etag: W/"637c7aa2-110dc"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.8 | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.8 IP66.42.40.161:0
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.8 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: application/javascript
last-modified: Mon, 10 Oct 2022 04:11:26 GMT
vary: Accept-Encoding
etag: W/"63439b6e-80a1"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP66.42.40.161:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: application/javascript
last-modified: Mon, 10 Oct 2022 04:11:26 GMT
vary: Accept-Encoding
etag: W/"63439b6e-2fa6"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js IP66.42.40.161:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Cookie: _ga_SJP1FC2G4M=GS1.1.1670108135.1.0.1670108135.0.0.0; _ga=GA1.1.866848430.1670108135
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:37 GMT
content-type: application/javascript
last-modified: Mon, 10 Oct 2022 04:11:26 GMT
vary: Accept-Encoding
etag: W/"63439b6e-54f"
expires: Mon, 02 Jan 2023 22:55:37 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2 | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2 IP66.42.40.161:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: application/javascript
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
vary: Accept-Encoding
etag: W/"625095f6-5db"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4 | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4 IP66.42.40.161:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: application/javascript
last-modified: Sat, 13 Jun 2020 18:53:27 GMT
vary: Accept-Encoding
etag: W/"5ee520a7-15fd"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.8 | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.8 IP66.42.40.161:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.8 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: application/javascript
last-modified: Mon, 10 Oct 2022 04:11:26 GMT
vary: Accept-Encoding
etag: W/"63439b6e-135d"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 IP66.42.40.161:0
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:35 GMT
content-type: text/css
last-modified: Mon, 10 Oct 2022 04:11:26 GMT
vary: Accept-Encoding
etag: W/"63439b6e-4b4f"
expires: Mon, 02 Jan 2023 22:55:35 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top1cacuoc.com/wp-content/themes/jnews/assets/dist/frontend.min.js?ver=10.8.1 | 66.42.40.161 | 200 OK | 0 B |
URL HTTP/2top1cacuoc.com/wp-content/themes/jnews/assets/dist/frontend.min.js?ver=10.8.1 IP66.42.40.161:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/jnews/assets/dist/frontend.min.js?ver=10.8.1 HTTP/1.1
Host: top1cacuoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top1cacuoc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 22:55:36 GMT
content-type: application/javascript
last-modified: Fri, 18 Nov 2022 02:44:22 GMT
vary: Accept-Encoding
etag: W/"6376f186-4a6cb"
expires: Mon, 02 Jan 2023 22:55:36 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
|
|