r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7786cd9bd97e024b3a1d16215defaad2
786ddbb74b0b6bd9270622dbe0258d6caee407c1
9c297ccfd178eec7e472fb64a6b2e34d4c7a6dec32870f49982353e590196ba0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C297CCFD178EEC7E472FB64A6B2E34D4C7A6DEC32870F49982353E590196BA0"
Last-Modified: Mon, 14 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8747
Expires: Wed, 16 Nov 2022 05:38:50 GMT
Date: Wed, 16 Nov 2022 03:13:03 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4fe5a11c3ca8a150aad830b739f24b58
898b730b1a66dd49c6f018333ba828410f63f347
2c3a2a8a3dfa29808bd550718025fdf355e4a88235cb50ae978abc00ee5fd23b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5434
Cache-Control: max-age=118118
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 03:13:03 GMT
Etag: "63736a6b-1d7"
Expires: Thu, 17 Nov 2022 12:01:41 GMT
Last-Modified: Tue, 15 Nov 2022 10:31:07 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c88bc06741ab9fb81c2544acfcc34aa2
362cab19cff5aba27f472cc00071d5dfa38192e4
314ba27975f458e13917b2be91c9d5989a3e57c9e94b5a84dd52d0e21d27ae7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "314BA27975F458E13917B2BE91C9D5989A3E57C9E94B5A84DD52D0E21D27AE7F"
Last-Modified: Mon, 14 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20077
Expires: Wed, 16 Nov 2022 08:47:40 GMT
Date: Wed, 16 Nov 2022 03:13:03 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 16 Nov 2022 02:44:43 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1700
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: lDK936lAL540xC8K2jc86Vqx46g/38ugX2/d00FLsiCoQU10oMIoS5aHFBnTIQA88N+Ah7Gnd8c=
x-amz-request-id: 64QAJ8X63B3Q3FEC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 16 Nov 2022 02:51:51 GMT
age: 1272
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 03:13:03 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
191.6.211.57301 Moved Permanently 292 B URL HTTP/1.1 quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7e706953af3d04cce6f96ae4aca2bafe
f61a1d80fefffc75a9a7a307a5a2aeb4dc7e1c08
efa9244a6be25ac24e0607823030633614bd6ab3e6923bde77f38fa1a8c66d72
Analyzer Verdict Alert fortinet Phishing
GET /uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44 HTTP/1.1
Host: quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 16 Nov 2022 03:13:03 GMT
Server: Apache
Location: https://quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Content-Length: 292
Keep-Alive: timeout=5, max=500
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Cache-Control, Retry-After, Content-Length, Expires, ETag, Pragma, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 16 Nov 2022 02:44:49 GMT
cache-control: public,max-age=3600
age: 1694
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash de57a2d376db743a3987c454889f1f21
0defab699bdb1b158026f93c2dd105bcd65f6764
b1c47a81ac45af6f756a8eca8ef14a82f0113ea8f09dae7a285a4491963ae2ff
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3548
Cache-Control: max-age=111180
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 03:13:03 GMT
Etag: "637356af-1d7"
Expires: Thu, 17 Nov 2022 10:06:03 GMT
Last-Modified: Tue, 15 Nov 2022 09:06:55 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2ad37dbdeb09288bdd98d26d65106e90
44c917189f84c9300781d5897e4a03cdba415c9a
999c01f50ab74400776fc024620bb93d416c5d76f627d12363122ad8a3b818c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "999C01F50AB74400776FC024620BB93D416C5D76F627D12363122AD8A3B818C6"
Last-Modified: Tue, 15 Nov 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14436
Expires: Wed, 16 Nov 2022 07:13:39 GMT
Date: Wed, 16 Nov 2022 03:13:03 GMT
Connection: keep-alive
quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
191.6.211.57301 Moved Permanently 296 B URL HTTP/2 quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bea587053f8ae4e089c4b2e86f877ebc
a1786bbbbf6d3bb66792c9046018d976b8ae44fd
7f6986e6b58bc07284219e770ffc283c7a7e936179a3efd1b887d9feda13b6cf
Analyzer Verdict Alert fortinet Phishing
GET /uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44 HTTP/1.1
Host: quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
location: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
content-length: 296
content-type: text/html; charset=iso-8859-1
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
push.services.mozilla.com/
52.89.255.30101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.89.255.30:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: xW0XwRFBAB0RPILIL00RIw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: mJgZJgX6Pb4EiLKWkdl/phq9YNQ=
cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.js
151.101.85.229200 OK 6.8 kB URL HTTP/2 cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.js
IP 151.101.85.229:0
File type ASCII text, with very long lines (20693), with no line terminators
Hash 58a872ad8da4bad737e618cf78b55feb
1917e7662a1c0d1034c3056c6ebd0e9ae2d542f1
5ddc446ff4623ed98a827c66171c9d5d2809d7f679b0681eb088765e272849bb
GET /npm/cookieconsent@3/build/cookieconsent.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.1.1
x-jsd-version-type: version
etag: W/"50d5-nLraS9YXyGxjjPLr3exyStWWkHs"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 16 Nov 2022 03:13:04 GMT
age: 31672
x-served-by: cache-fra-eddf8230087-FRA, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6756
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.css?v=1.68451615
151.101.85.229200 OK 1.3 kB URL HTTP/2 cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.css?v=1.68451615
IP 151.101.85.229:0
File type ASCII text, with very long lines (1460)
Hash 8786cd8041431d860694eed4e4df5493
ad176b25138137c05527a1a93f9b1d2bd9819bb6
2f1ab64452cbd8b4a75b5f778aaadd7f8a9c194ef48c5e2e9132393b68d21a85
GET /npm/cookieconsent@3/build/cookieconsent.min.css?v=1.68451615 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 3.1.1
x-jsd-version-type: version
etag: W/"135e-3nthfC1sCV/yhiNebPZMMo2hpL8"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 16 Nov 2022 03:13:04 GMT
age: 31703
x-served-by: cache-fra-eddf8230021-FRA, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1299
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 73f5a5f64f86c457cc2558f44bbfbcd2
15c6a1f60ed86b20886f2b2025002b9392395880
04e20d91462edac11a6a3f2c9bb6a6de9ba23463f54a39c818d8f3f6d5d9be23
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 03:13:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP 104.18.20.226:0
Hash e9ee3639d3541ac2190d24c75cf4ac56
463d6a3fea18b8d03e14a247b4130c64fc3bcd6c
99ce21b63f16d927f4a29e5506dd75fbef5e4b78a581783552617d412e35875b
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 16 Nov 2022 03:13:04 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "D21CEF130DDC20A7EC8A31D347AF82E82023263F"
Expires: Wed, 16 Nov 2022 13:00:00 GMT
Last-Modified: Wed, 16 Nov 2022 01:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2711
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76ad0c73e8d2fac4-OSL
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 73f5a5f64f86c457cc2558f44bbfbcd2
15c6a1f60ed86b20886f2b2025002b9392395880
04e20d91462edac11a6a3f2c9bb6a6de9ba23463f54a39c818d8f3f6d5d9be23
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 03:13:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.quintaoimoveis.com.br/assets/fonts/flaticon/font/flaticon.css?v=1.68451615
191.6.211.57200 OK 2.5 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/fonts/flaticon/font/flaticon.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash a0240335bac7c1a06024356194a2397f
e71dec7655ffece83dee3ede6a3c96e1c194182f
f0cab9678721462f413ee70761632979f6887e5db2b3ad1fd5887f2fb4e6bfef
GET /assets/fonts/flaticon/font/flaticon.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:50 GMT
etag: "9a8-5e4f74d662c95"
accept-ranges: bytes
content-length: 2472
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13861
Expires: Wed, 16 Nov 2022 07:04:06 GMT
Date: Wed, 16 Nov 2022 03:13:05 GMT
Connection: keep-alive
fonts.googleapis.com/css?family=Open+Sans:400,300,600,700,800%7CPlayfair+Display:400,700%7CRoboto:100,300,400,400i,500,700
142.250.74.10200 OK 1.8 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,300,600,700,800%7CPlayfair+Display:400,700%7CRoboto:100,300,400,400i,500,700
IP 142.250.74.10:0
Hash 38b0f44557ee3797f89aec9bd7a20d5b
393337e680e2776c0245cac550bdccd1dfe6407a
f228172f90e595c1b133551f0111712daa94f61c024a29f176253c441d3dc781
GET /css?family=Open+Sans:400,300,600,700,800%7CPlayfair+Display:400,700%7CRoboto:100,300,400,400i,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 16 Nov 2022 03:13:04 GMT
date: Wed, 16 Nov 2022 03:13:04 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13861
Expires: Wed, 16 Nov 2022 07:04:06 GMT
Date: Wed, 16 Nov 2022 03:13:05 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66dafa1b-55cd-4968-9135-1ea419481f20.webp
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66dafa1b-55cd-4968-9135-1ea419481f20.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2fec68e4ff4a2f6983c4fb1c03e70ed0
e590b099b6803d014c4ec37cac510a65bc10aa4a
8fc33642239701291705777c3d161d30b14807a72d20c68f3a9b412edfe29bb2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66dafa1b-55cd-4968-9135-1ea419481f20.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11466
x-amzn-requestid: d014e7ab-f4d1-4dac-af82-9443de7559ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqY4-EsGoAMFqXg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63740839-5085339516785a4f353595ff;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:44:25 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: cL3nS13xhZJft25oulFNL5TCT-ts4zdbn40ktPJf9Pf8b2Ai-WwwCA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 21:47:45 GMT
etag: "e590b099b6803d014c4ec37cac510a65bc10aa4a"
content-type: image/jpeg
age: 19520
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b3656a0-c710-454f-bc65-08e79655337e.jpeg
34.120.237.76200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b3656a0-c710-454f-bc65-08e79655337e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8ab111b9ccae10f32271dc6218b48c06
eaf84a2f21a67a8a819581137e782e7dec393198
99ef25da6153945477ab46450cd03fcdea31251c25d1e995c98c34c7cb96d1ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b3656a0-c710-454f-bc65-08e79655337e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6634
x-amzn-requestid: 9120c059-65f4-47a7-bc8b-9914e27e53ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqZK_E24IAMF3kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637408ac-53b5d53863ad2cbf2dd2cd96;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:46:20 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Hu9sBan20v8XwXl4fR-CeLKMrBEYcvy62ij50hwKT2GpbukiPxKljQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 21:47:42 GMT
age: 19523
etag: "eaf84a2f21a67a8a819581137e782e7dec393198"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e55852-45bd-4ea6-98bd-7cf863b088c9.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e55852-45bd-4ea6-98bd-7cf863b088c9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba648c440393de8ff1e9912204461a96
103dbdc3e18ff05f3dd61ad0ab1164786e8fa125
d7a414856c394028119f8ef496466a120eecc6044955562cb4745b90b5275391
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e55852-45bd-4ea6-98bd-7cf863b088c9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10381
x-amzn-requestid: 07399c7d-2033-4fbf-b4d3-20289b1abaac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqYFjHlBoAMFo2A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637406f0-0e5cb3c95668b5a31f6ec404;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:38:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FIZdY-ifSCB-OVNRGQW6Y_Q2DR0ZQr14PcgJUKG1Xfb703CJvhdXqA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 22:00:22 GMT
age: 18763
etag: "103dbdc3e18ff05f3dd61ad0ab1164786e8fa125"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd5bdc050716bb76afe8090fc81617e7
5109c156b180727767fc03c411190ccc0d3fb5fc
9b13e7838946c6654dda17886c2ca8d42de934acb93f4bddb1008dfa1bd1ea99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 20e508bd-6568-4225-9bee-c683a49d44f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUHkpIAMFfJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-7dc726b94a37fc667e2e6646;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: X3SUo1LP97TxraRav0ftskBhzWkTJInHaS44PW26yloF-dgD-bHBuA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 21:45:58 GMT
age: 19627
etag: "5109c156b180727767fc03c411190ccc0d3fb5fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30efee28-35ab-4b55-b685-02cbd4c5c8c8.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30efee28-35ab-4b55-b685-02cbd4c5c8c8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b31091803f98744f4da3b311467300a7
d829c5d23a494bc901d925dd02b84c470a0de479
c1cb88b82d8b5a82019da970f812cd31e13086c2da8498a21a57e7238aa34fe8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30efee28-35ab-4b55-b685-02cbd4c5c8c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8971
x-amzn-requestid: b5dd68c5-7146-4d31-a7fd-4ac4c474119a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bnb6bGeyoAMFV9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6372d9dc-2ca4003e65d69039389bc676;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 00:14:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8TqIvhJUq_yG_iMFds_btqtYsrNzoaZeIQgOP0-Kc60yuQFOPYEXRA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 10:37:00 GMT
age: 59765
etag: "d829c5d23a494bc901d925dd02b84c470a0de479"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe55c2716-60be-4683-be3f-200916df10c9.jpeg
34.120.237.76200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe55c2716-60be-4683-be3f-200916df10c9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ff8de7ea7e0082e96f7f7c4ece3bd8a
1f19bb2f2f134d0908b440e80e3d101057722381
d5ca2e2ad45137bf2540ff7dd61b9802193d16560d2b29fa106bf193c285e5f8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe55c2716-60be-4683-be3f-200916df10c9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6661
x-amzn-requestid: b299f2b1-4a41-4af5-8241-4dabd05006e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqYFZF3goAMF9WA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637406ef-07c06ccd08a3aa2a17e6b375;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:38:55 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Vbk_B2I93QzH-YBiK5qcWEPjXwJ4VOAdORHDmL-hHxj_nwARdPXvvw==
via: 1.1 b04d82bf2bc15ab146955a862be263f0.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 22:04:19 GMT
etag: "1f19bb2f2f134d0908b440e80e3d101057722381"
content-type: image/jpeg
age: 18526
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/bootstrap-submenu.css?v=1.68451615
191.6.211.57200 OK 6.5 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/bootstrap-submenu.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 31b5a95190836a9fceb965df09947b63
a66c33112d5441f2354efc7e734e91a50b0b47c8
2e4bd24586817b90acdaa9b88af5311bf2c4e314a0d9fc1c1c3d738e1e51fa10
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/bootstrap-submenu.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "1947-5e4f74c521cb5"
accept-ranges: bytes
content-length: 6471
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/bootstrap-select.min.css?v=1.68451615
191.6.211.57200 OK 6.7 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/bootstrap-select.min.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (6433)
Hash 902c7678a616b665addf9db32dd0a450
3a55108519bd48fe572767f24b5bdb72305fd98b
043bb6a2c76a8d86c8f44486e792cb94743cb7fb758eb7af5162082a432b81c1
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/bootstrap-select.min.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:31 GMT
etag: "19fa-5e4f74c505f65"
accept-ranges: bytes
content-length: 6650
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/fonts/linearicons/style.css?v=1.68451615
191.6.211.57200 OK 8.3 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/fonts/linearicons/style.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash aa4cd95fc370b1cc4247fec9e0f946eb
890ddf42c64e544ed82e55c325de8f6d9dcf70e4
f5c203b6416a054de195921e85165e4d66fd303ea8d20982a190fede7b673576
Analyzer Verdict Alert fortinet Phishing
GET /assets/fonts/linearicons/style.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:43 GMT
etag: "2098-5e4f74d043a5d"
accept-ranges: bytes
content-length: 8344
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/leaflet.css?v=1.68451615
191.6.211.57200 OK 10 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/leaflet.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash dd02f3af507ad0c157ee728b60563227
b5c1ffbf24d25c2631d07382eab595a499d13a51
054c8428a61c92550ff6eec8a07a5d06a4b550d6e72c09d73fec7eadbdda0b19
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/leaflet.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "2776-5e4f74c585675"
accept-ranges: bytes
content-length: 10102
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/map.css
191.6.211.57200 OK 16 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/map.css
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash d1d1723f92584b38a404df1097b07862
296864f26e1988b795d8133cde646fde8df76d53
f479285a67c398bcc26da9910ee8a5497dc808ff1fb6ff434e223cfcdac68157
GET /assets/css/map.css HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "3f49-5e4f74c5a8cdd"
accept-ranges: bytes
content-length: 16201
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/fonts/font-awesome/css/font-awesome.min.css?v=1.68451615
191.6.211.57200 OK 31 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/fonts/font-awesome/css/font-awesome.min.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (30819)
Hash 4921ec3a59f0521419db0bb832066fe0
d97430435f4473ec207fba2f36f67742da4e94ce
a8bd8b57e92a4ddb091c315b0b365a72fedd552cabef88b6a38f9ab4f26c138b
Analyzer Verdict Alert fortinet Phishing
GET /assets/fonts/font-awesome/css/font-awesome.min.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:51 GMT
etag: "7906-5e4f74d760345"
accept-ranges: bytes
content-length: 30982
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/util.css?v=1.68451615
191.6.211.57200 OK 889 B URL HTTP/2 www.quintaoimoveis.com.br/assets/css/util.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash e154655b1313567592b1e2932dfd8341
98b50d91fa6ea0f8a269f172875821f434ad6a2e
53e435f7b895d3f04468a3b1e5c2e670b432a0a77736dc3d0cf3d58cad06dcaa
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/util.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "379-5e4f74c5f4bb5"
accept-ranges: bytes
content-length: 889
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/ie-emulation-modes-warning.js?v=1.68451615
191.6.211.57200 OK 2.2 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/ie-emulation-modes-warning.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash ca9f93eaf66619997f4c9e773e0e1e02
4d777efd46a68823ddf48b109c60080403b6d52b
159962d64c5d4c0276db83fe61cea114823a30a4ae01d5f66ad8e6af44f6ca1e
GET /assets/js/ie-emulation-modes-warning.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "8c7-5e4f74cd03dc5"
accept-ranges: bytes
content-length: 2247
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery.scrollUp.js?v=1.68451615
191.6.211.57200 OK 2.4 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery.scrollUp.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (2437), with no line terminators
Hash a8f0a63d79286168ca27252e4b5e25a6
817a703bd3e0d6c4f054d269ccb8642dd0c3140e
9c91de469811a71271b366f9e326fee8769c33053cd3e378cd8c72780e01f214
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery.scrollUp.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:41 GMT
etag: "985-5e4f74cdbfd95"
accept-ranges: bytes
content-length: 2437
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/ie10-viewport-bug-workaround.css?v=1.68451615
191.6.211.57200 OK 518 B URL HTTP/2 www.quintaoimoveis.com.br/assets/css/ie10-viewport-bug-workaround.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 95c9d9598d5be1cf69a6341649eca4e2
71d4d986ffcdbfab7ef154c95993e54c28def77a
9485950ff928c4d006f35a8fe43e7c0ebdc7bc3e6dfb28d1334507fbd0b318d7
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/ie10-viewport-bug-workaround.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "206-5e4f74c56953d"
accept-ranges: bytes
content-length: 518
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/base_url/base_url.js?v=1.68451615
191.6.211.57200 OK 53 B URL HTTP/2 www.quintaoimoveis.com.br/assets/js/base_url/base_url.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 07d8e15637c9e3204c314a239dbd2129
2ef4b1006f248ac12ee6e5b3aad8523fc7c7de50
9074ab2a1e9e1677d6750a53d4b5919f1f7a449613752a65c744c1fc84c4d6f6
GET /assets/js/base_url/base_url.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Sep 2022 17:39:35 GMT
etag: "35-5e82de9b1e9f7"
accept-ranges: bytes
content-length: 53
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/ie10-viewport-bug-workaround.js?v=1.68451615
191.6.211.57200 OK 682 B URL HTTP/2 www.quintaoimoveis.com.br/assets/js/ie10-viewport-bug-workaround.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash e00b941fbb45e15c1fca528cdcce2444
f520b96b591f9aeffcd645cc9f803c9580cdb5ca
4ab77001090794c2f79060ada48f7ef5682a3c727dd31be876b59635e5b0fbe1
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/ie10-viewport-bug-workaround.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "2aa-5e4f74cd0ab25"
accept-ranges: bytes
content-length: 682
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/magnific-popup.css?v=1.68451615
191.6.211.57200 OK 7.5 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/magnific-popup.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 8ff5387a95b3124e20d64ae8acc62b20
406ef5543359083d41c984387138550d6a855331
23f703d87caf866aae9e0bcef6f7efec2f5de57476c99e2adbcf32c38fc12844
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/magnific-popup.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "1d6c-5e4f74c5a1b95"
accept-ranges: bytes
content-length: 7532
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/bootstrap-submenu.js?v=1.68451615
191.6.211.57200 OK 2.8 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/bootstrap-submenu.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (2610)
Hash 32d85e0f496241e5de6eb2e040883b84
0d481a4fe582ebb6e97166e68b567565ba61a7f9
9a39e0cba88dc9b0089d9717167bce3bfc401e702968bd5a0ac453cf21e45257
GET /assets/js/bootstrap-submenu.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:39 GMT
etag: "ae4-5e4f74ccb09bd"
accept-ranges: bytes
content-length: 2788
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/correcao.css?v=1.68451615
191.6.211.57200 OK 7.2 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/correcao.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash ade5dd3c057e148671941b338f7dfdd1
27cac69172ffa185ad5b018815dd9dfc0c49ee9a
ac9ae705f7c98c43955ffca7c7f11bf48b18cada8f81b088916912978b5c839a
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/correcao.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 27 Sep 2022 12:03:57 GMT
etag: "1c02-5e9a77057c5ad"
accept-ranges: bytes
content-length: 7170
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/dropzone.css?v=1.68451615
191.6.211.57200 OK 12 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/dropzone.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 8b6c7282340f2f62e4acb5d5827779ba
cbe0c8d5295a90fe1e7bd7c374f7bd47a999d5d1
aff1f8176ca63fefded4df9f6b550a8051d1001d61b051e64f7ba18019a6d198
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/dropzone.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "2d16-5e4f74c55aec5"
accept-ranges: bytes
content-length: 11542
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/jquery.mCustomScrollbar.css?v=1.68451615
191.6.211.57200 OK 53 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/jquery.mCustomScrollbar.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 41605be1cba276caf15a9a84b0d2719e
a0867811f1ec9b61f55ecfc13143c416322e9a99
ab95d95996d636db32d0daf3c8ad927d7659e1fb3e01cd56a69ce01d28a976f1
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/jquery.mCustomScrollbar.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "cf91-5e4f74c585675"
accept-ranges: bytes
content-length: 53137
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/skins/default.css?v=1.68451615
191.6.211.57200 OK 16 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/skins/default.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 2fa7531b7aa1b830821d89d6d9092f76
8b0d803bafe43629037837b549a9b17e6d894a66
3a57fb281d0ca108530d7647c851659c6650412ea1d07d5f1f757e83ba4b7ca7
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/skins/default.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:23:41 GMT
etag: "3f4b-5e4f76d0dd3bd"
accept-ranges: bytes
content-length: 16203
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/animate.min.css?v=1.68451615
191.6.211.57200 OK 76 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/animate.min.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (460)
Hash d11ac1f04a7baaae9b5af32f76027d3f
3c570a47535c09e8b756612c2c385e5b9bb4fe00
ce17005c1639af7af95cde7a7683b2ecfee7192f2899106e7209f0a37bd73042
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/animate.min.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "12a55-5e4f74c51a39d"
accept-ranges: bytes
content-length: 76373
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/wow.min.js?v=1.68451615
191.6.211.57200 OK 8.4 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/wow.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (8386)
Hash 43df281b12fea21afa7533000b77b9da
bbb906a10283f31213d85aa95e11a489c9c27b4e
6bc4d4442fe40defc9579e89683d9c4bd0c9bc6b5870c8692407028b98e16233
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/wow.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:41 GMT
etag: "20e0-5e4f74ce4fa5d"
accept-ranges: bytes
content-length: 8416
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/app.js?v=1.68451615
191.6.211.57200 OK 10 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/app.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 2965018e8ae0fcc667de6c80d53e65ea
13b507d80df05919d38d837fa9ade7b94b6a8a95
aabe5b6d2828ccd8ad3d3f68c5454dd77d264c42137f3303152e67e791e9528e
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/app.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:39 GMT
etag: "28d0-5e4f74cc96bad"
accept-ranges: bytes
content-length: 10448
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/bootstrap.min.css?v=1.68451615
191.6.211.57200 OK 121 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/bootstrap.min.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (65371)
Size 121 kB (121260 bytes)
Hash 2f624089c65f12185e79925bc5a7fc42
8eb176c70b9cfa6871b76d6dc98fb526e7e9b3de
eece6e0c65b7007ab0eb1b4998d36dafe381449525824349128efc3f86f4c91c
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/bootstrap.min.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "1d9ac-5e4f74c54cc35"
accept-ranges: bytes
content-length: 121260
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/style.css?v=1.68451615
191.6.211.57200 OK 134 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/style.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Size 134 kB (134453 bytes)
Hash ade0d52419543bc466619c933a3e574a
17d89e1857d38e22f057d653982697e859c8b5e7
730c3ce243967b130d9125081758bbac74b02ef7e3704f55935f181259cf7c37
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/style.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:26:50 GMT
etag: "20d35-5e4f77850559d"
accept-ranges: bytes
content-length: 134453
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery.magnific-popup.min.js?v=1.68451615
191.6.211.57200 OK 20 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery.magnific-popup.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (20087)
Hash 2ff3269846e36a0bdb0c5ca8877f4b80
d87cd0d6e37b3bf5d57498c11cdc222e40fe5c65
d199b3eae4ec01cfe0be1e9c5ec06391ea646b47aba35b591e6cdf67bb8cd284
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery.magnific-popup.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "4f4b-5e4f74cd736ed"
accept-ranges: bytes
content-length: 20299
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/img/logos/logo.png
191.6.211.57200 OK 44 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/img/logos/logo.png
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type PNG image data, 450 x 209, 8-bit/color RGBA, non-interlaced\012- data
Hash 3894f71f44ea66958d7797e4ac28ba50
a778630ab3e77df4d01ff3670b173a970845e47a
ff7f50833a406b3be1de0dc1646b18c4137479367153ebbfffcc7dc1a1af814f
GET /assets/img/logos/logo.png HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:23:19 GMT
etag: "ad11-5e4f76bbc5935"
accept-ranges: bytes
content-length: 44305
cache-control: max-age=1800
content-type: image/png
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/img/logos/footer-logo.png
191.6.211.57200 OK 44 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/img/logos/footer-logo.png
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type PNG image data, 450 x 209, 8-bit/color RGBA, non-interlaced\012- data
Hash 3894f71f44ea66958d7797e4ac28ba50
a778630ab3e77df4d01ff3670b173a970845e47a
ff7f50833a406b3be1de0dc1646b18c4137479367153ebbfffcc7dc1a1af814f
GET /assets/img/logos/footer-logo.png HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:28:47 GMT
etag: "ad11-5e4f77f548da5"
accept-ranges: bytes
content-length: 44305
cache-control: max-age=1800
content-type: image/png
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery.mask.js?v=1.68451615
191.6.211.57200 OK 23 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery.mask.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash e86166037cdacd2e8b8c4428077d6cb8
79028d2e5e6334eaaabb7f363d2aaa016988f64c
3edcd35f57ed9849a3f18522017d304c843e75d4c0195b763222ccb06b003313
GET /assets/js/jquery.mask.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "5a58-5e4f74cd907c5"
accept-ranges: bytes
content-length: 23128
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 83b2cc8ea40190737f2d7ebb9681df7c
c4e86e12dad1281f1bd8647d39745e4727fbd29e
c24433a6381b52df17e3cf1cb16f7e3c75e9a57c1174e720a091f4c485c53dbb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 03:13:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ee088afc22d9edecee7fc8f9a677d1c8
015b4d5b0037edc07838843b4eac9062fe092fae
61a4cd5e8a0a10a77ea15f3344b522b9b20455f02002eb56d4543d9d0b8aa450
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 03:13:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 83b2cc8ea40190737f2d7ebb9681df7c
c4e86e12dad1281f1bd8647d39745e4727fbd29e
c24433a6381b52df17e3cf1cb16f7e3c75e9a57c1174e720a091f4c485c53dbb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 03:13:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
172.217.21.163200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 172.217.21.163:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.quintaoimoveis.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Nov 2022 05:42:51 GMT
expires: Fri, 10 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 509415
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 83b2cc8ea40190737f2d7ebb9681df7c
c4e86e12dad1281f1bd8647d39745e4727fbd29e
c24433a6381b52df17e3cf1cb16f7e3c75e9a57c1174e720a091f4c485c53dbb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 03:13:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.quintaoimoveis.com.br/assets/js/bootstrap-select.min.js?v=1.68451615
191.6.211.57200 OK 34 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/bootstrap-select.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (32019)
Hash e79ba51275bd09154cd3d4e155444c2b
4455ee98d9c7d861a373842e3f8a265f35ca4a9f
2d7c202c80ee4edf9c89abb2c1b3759ed2ba0bf0061d8642b8ef894fb421ad97
GET /assets/js/bootstrap-select.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "84ae-5e4f74ccbfbed"
accept-ranges: bytes
content-length: 33966
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/bootstrap.min.js?v=1.68451615
191.6.211.57200 OK 37 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/bootstrap.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (32003)
Hash c5b5b2fa19bd66ff23211d9f844e0131
791aa054a026bddc0de92bad6cf7a1c6e73713d5
2979f9a6e32fc42c3e7406339ee9fe76b31d1b52059776a02b4a7fa6a4fd280a
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/bootstrap.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "9004-5e4f74ccd53ad"
accept-ranges: bytes
content-length: 36868
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery.mCustomScrollbar.concat.min.js?v=1.68451615
191.6.211.57200 OK 46 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery.mCustomScrollbar.concat.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (32001)
Hash 59af70cc2559b47db8864e69e016d30d
3962c007c80d2c23508de4cfe8a23529f1a5c498
44a0a9aa817e76bc2ac4f824f298418dda834783fe0ea0e721b97aaf82cd42be
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery.mCustomScrollbar.concat.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:41 GMT
etag: "b1ab-5e4f74cdb70f5"
accept-ranges: bytes
content-length: 45483
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery-2.2.0.min.js?v=1.68451615
191.6.211.57200 OK 86 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery-2.2.0.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (32069)
Hash 93c4b563622d278b1065690a3d93709e
f00d128cf399f17322b1d4ee02fa8cd892e081bd
601c06474a16936670a0477da2a777ccfca3301e3857204ec9b55dfa2c45287e
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery-2.2.0.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "14e54-5e4f74cd3471d"
accept-ranges: bytes
content-length: 85588
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/lib/slick-1.8.1/slick/slick.css?v=1.68451615
191.6.211.57200 OK 2.1 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/lib/slick-1.8.1/slick/slick.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 1856c916f957fb90b684749a98a1705a
f217b9ee12b3e744fa9ff7dd661927de1eba8232
0d86ed0aebe5aa5af7069a67735fc47578b9c926406e1c7baced692bc4c0a651
Analyzer Verdict Alert fortinet Phishing
GET /assets/lib/slick-1.8.1/slick/slick.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:57 GMT
etag: "848-5e4f74dd93d9d"
accept-ranges: bytes
content-length: 2120
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:06 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/lib/slick-1.8.1/slick/slick-theme.css?v=1.68451615
191.6.211.57200 OK 3.1 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/lib/slick-1.8.1/slick/slick-theme.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash a4b02d957b44571b307c0ddb206e0c94
23acd31d6664488fadc30868c477816f55ae0ad4
8a311dee53722942df8ec4a6cdaba5e9e71e44f23d8cde49f09f59df2eeb7dd6
Analyzer Verdict Alert fortinet Phishing
GET /assets/lib/slick-1.8.1/slick/slick-theme.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:57 GMT
etag: "c49-5e4f74dd7804d"
accept-ranges: bytes
content-length: 3145
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:06 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/img/loader.gif
191.6.211.57200 OK 27 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/img/loader.gif
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type GIF image data, version 89a, 38 x 38\012- data
Hash 8c29ba58bf7e5289fed70efcb011b398
44d4f1e26aee06150e27727dd31709415846e942
64a4a69d295326682b71712b0039edb407a2c810fa4d9695b4ef93b7862e4c04
GET /assets/img/loader.gif HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/assets/css/style.css?v=1.68451615
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:37 GMT
etag: "699b-5e4f74c9ff665"
accept-ranges: bytes
content-length: 27035
cache-control: max-age=1800
content-type: image/gif
date: Wed, 16 Nov 2022 03:13:06 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
191.6.211.57200 OK 77 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/assets/fonts/font-awesome/css/font-awesome.min.css?v=1.68451615
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:52 GMT
etag: "12d68-5e4f74d84ef95"
accept-ranges: bytes
content-length: 77160
date: Wed, 16 Nov 2022 03:13:06 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/img/favicon.ico
191.6.211.57200 OK 3.7 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/img/favicon.ico
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type PNG image data, 60 x 36, 8-bit/color RGBA, non-interlaced\012- data
Hash 59ca4dd6141956e8dd4c8c5fd71b3632
d0bfddd4cb482ad28f3bbe21b86a6ca0de3da5d2
cc2807c577cdada87f6beaf480daf58712df7c3654f626dc6dddc40b1cf3b532
GET /assets/img/favicon.ico HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Sep 2022 18:26:37 GMT
etag: "e51-5e82e91ede92a"
accept-ranges: bytes
content-length: 3665
cache-control: max-age=1800
content-type: image/x-icon
date: Wed, 16 Nov 2022 03:13:06 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/skins/default.css
191.6.211.57200 OK 16 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/skins/default.css
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 2fa7531b7aa1b830821d89d6d9092f76
8b0d803bafe43629037837b549a9b17e6d894a66
3a57fb281d0ca108530d7647c851659c6650412ea1d07d5f1f757e83ba4b7ca7
GET /assets/css/skins/default.css HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:23:41 GMT
etag: "3f4b-5e4f76d0dd3bd"
accept-ranges: bytes
content-length: 16203
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 03:13:06 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F549ca16b-d2d0-45a9-850e-91164999caac.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F549ca16b-d2d0-45a9-850e-91164999caac.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 128129f63745c26d853b576607012d2b
3e2d1cd8d60c6c1c77e6a5ce164417490892cdeb
9efb7b49278d732d60560d50f41255ec0bce92f91cb16bee0f2eadf238dcf5aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F549ca16b-d2d0-45a9-850e-91164999caac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10630
x-amzn-requestid: f350f881-20b7-4895-8e5a-52ae0b57844d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqYEAEpNoAMF7-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637406e6-4cef387432b65d1b316e8f44;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:38:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KnboCtVzCl0yRLYJmbGOa2rVuNC13ZkTxtaoCkM3Vo65FCiE2t3e_g==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 21:47:49 GMT
age: 19522
etag: "3e2d1cd8d60c6c1c77e6a5ce164417490892cdeb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
191.6.211.57200 OK 0 B URL HTTP/2 www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Analyzer Verdict Alert fortinet Phishing
GET /uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
vary: Accept-Encoding
set-cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3; path=/
content-type: text/html; charset=UTF-8
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery.mb.YTPlayer.js?v=1.68451615
191.6.211.57200 OK 0 B URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery.mb.YTPlayer.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery.mb.YTPlayer.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "192eb-5e4f74cda4bfd"
accept-ranges: bytes
content-length: 103147
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/dropzone.js?v=1.68451615
191.6.211.57200 OK 0 B URL HTTP/2 www.quintaoimoveis.com.br/assets/js/dropzone.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
GET /assets/js/dropzone.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/a535f8a831e76be48be35e8d48a42b44
Cookie: PHPSESSID=8df52e889ce374281e972d3d2c1bd0a3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "12bb5-5e4f74cce9bcd"
accept-ranges: bytes
content-length: 76725
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 03:13:04 GMT
server: Apache
X-Firefox-Spdy: h2