r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7786cd9bd97e024b3a1d16215defaad2
786ddbb74b0b6bd9270622dbe0258d6caee407c1
9c297ccfd178eec7e472fb64a6b2e34d4c7a6dec32870f49982353e590196ba0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C297CCFD178EEC7E472FB64A6B2E34D4C7A6DEC32870F49982353E590196BA0"
Last-Modified: Mon, 14 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3130
Expires: Wed, 16 Nov 2022 03:34:06 GMT
Date: Wed, 16 Nov 2022 02:41:56 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4fe5a11c3ca8a150aad830b739f24b58
898b730b1a66dd49c6f018333ba828410f63f347
2c3a2a8a3dfa29808bd550718025fdf355e4a88235cb50ae978abc00ee5fd23b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2007
Cache-Control: max-age=116558
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 02:41:56 GMT
Etag: "63736a6b-1d7"
Expires: Thu, 17 Nov 2022 11:04:34 GMT
Last-Modified: Tue, 15 Nov 2022 10:31:07 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8c15cef160d1514fc977ed4c4e97086c
ffe4ce3199658a1fc7a45d1607df40ef3911621d
db1a82d8a2bacc0257b87efec0c365c1b769700fa27ce928321e082505f1d72a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB1A82D8A2BACC0257B87EFEC0C365C1B769700FA27CE928321E082505F1D72A"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2968
Expires: Wed, 16 Nov 2022 03:31:24 GMT
Date: Wed, 16 Nov 2022 02:41:56 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 16 Nov 2022 01:44:43 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3433
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: NplrFpl7GX81oKbcw4aos98RCkmUnUkCT5uf8wbdQwXqwHhodoG1v6/Op8VBV61aXNVo+32Vork=
x-amz-request-id: SZX2SDQX2BQJXXH4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 16 Nov 2022 02:14:30 GMT
age: 1646
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 02:41:56 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Retry-After, ETag, Alert, Expires, Backoff, Content-Type, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 16 Nov 2022 01:44:48 GMT
cache-control: public,max-age=3600
age: 3428
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
191.6.211.57301 Moved Permanently 306 B URL HTTP/1.1 quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash dac1b3439b29ee22d62a2d20f7cf29c0
e8f2474abbaf24ca521666a86d1c1e755d196743
e4ef3be22b8c336fa7b13c8742ad9737146b92c731804db6da0227d86753183f
Analyzer Verdict Alert fortinet Phishing
GET /uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php HTTP/1.1
Host: quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 16 Nov 2022 02:41:56 GMT
Server: Apache
Location: https://quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Content-Length: 306
Keep-Alive: timeout=5, max=500
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash de57a2d376db743a3987c454889f1f21
0defab699bdb1b158026f93c2dd105bcd65f6764
b1c47a81ac45af6f756a8eca8ef14a82f0113ea8f09dae7a285a4491963ae2ff
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5864
Cache-Control: max-age=115362
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 02:41:57 GMT
Etag: "637356af-1d7"
Expires: Thu, 17 Nov 2022 10:44:39 GMT
Last-Modified: Tue, 15 Nov 2022 09:06:55 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.89.136.7101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.89.136.7:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: o4t7HNMu3XcOcAe8+d0o9w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: BEE7N0187rGGiBdfBzJqdIOkfGw=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 132ccef04d73d324ecf63c4b58ab95fa
fcbe6ef863aae156305fcdd0ddb74b6cdb8426a1
698974d7950d1a753e439e74fb3d4317ff62431a355d7099e66ff181f583bcf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "698974D7950D1A753E439E74FB3D4317FF62431A355D7099E66FF181F583BCF8"
Last-Modified: Tue, 15 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 16 Nov 2022 08:41:57 GMT
Date: Wed, 16 Nov 2022 02:41:57 GMT
Connection: keep-alive
quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
191.6.211.57301 Moved Permanently 310 B URL HTTP/2 quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ad9c94bf6b4a1e6cc30c1185b6166db4
5f182672567c1fe642029d839b89fee941d3e5f0
bf1e22b1560c7eb463f5450b14146b8f9e976526748a49733289b35b73bc14c1
Analyzer Verdict Alert fortinet Phishing
GET /uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php HTTP/1.1
Host: quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
location: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
content-length: 310
content-type: text/html; charset=iso-8859-1
date: Wed, 16 Nov 2022 02:41:57 GMT
server: Apache
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.css?v=1.68451615
151.101.85.229200 OK 1.3 kB URL HTTP/2 cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.css?v=1.68451615
IP 151.101.85.229:0
File type ASCII text, with very long lines (1460)
Hash 8786cd8041431d860694eed4e4df5493
ad176b25138137c05527a1a93f9b1d2bd9819bb6
2f1ab64452cbd8b4a75b5f778aaadd7f8a9c194ef48c5e2e9132393b68d21a85
GET /npm/cookieconsent@3/build/cookieconsent.min.css?v=1.68451615 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 3.1.1
x-jsd-version-type: version
etag: W/"135e-3nthfC1sCV/yhiNebPZMMo2hpL8"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 16 Nov 2022 02:41:58 GMT
age: 29837
x-served-by: cache-fra-eddf8230021-FRA, cache-bma1625-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1299
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.js
151.101.85.229200 OK 6.8 kB URL HTTP/2 cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.js
IP 151.101.85.229:0
File type ASCII text, with very long lines (20693), with no line terminators
Hash 58a872ad8da4bad737e618cf78b55feb
1917e7662a1c0d1034c3056c6ebd0e9ae2d542f1
5ddc446ff4623ed98a827c66171c9d5d2809d7f679b0681eb088765e272849bb
GET /npm/cookieconsent@3/build/cookieconsent.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.1.1
x-jsd-version-type: version
etag: W/"50d5-nLraS9YXyGxjjPLr3exyStWWkHs"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 16 Nov 2022 02:41:58 GMT
age: 29807
x-served-by: cache-fra-eddf8230087-FRA, cache-bma1625-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6756
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2999
Expires: Wed, 16 Nov 2022 03:31:57 GMT
Date: Wed, 16 Nov 2022 02:41:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2999
Expires: Wed, 16 Nov 2022 03:31:57 GMT
Date: Wed, 16 Nov 2022 02:41:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2999
Expires: Wed, 16 Nov 2022 03:31:57 GMT
Date: Wed, 16 Nov 2022 02:41:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2999
Expires: Wed, 16 Nov 2022 03:31:57 GMT
Date: Wed, 16 Nov 2022 02:41:58 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b3656a0-c710-454f-bc65-08e79655337e.jpeg
34.120.237.76200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b3656a0-c710-454f-bc65-08e79655337e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8ab111b9ccae10f32271dc6218b48c06
eaf84a2f21a67a8a819581137e782e7dec393198
99ef25da6153945477ab46450cd03fcdea31251c25d1e995c98c34c7cb96d1ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b3656a0-c710-454f-bc65-08e79655337e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6634
x-amzn-requestid: 9120c059-65f4-47a7-bc8b-9914e27e53ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqZK_E24IAMF3kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637408ac-53b5d53863ad2cbf2dd2cd96;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:46:20 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Hu9sBan20v8XwXl4fR-CeLKMrBEYcvy62ij50hwKT2GpbukiPxKljQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 21:47:42 GMT
age: 17656
etag: "eaf84a2f21a67a8a819581137e782e7dec393198"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e55852-45bd-4ea6-98bd-7cf863b088c9.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e55852-45bd-4ea6-98bd-7cf863b088c9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba648c440393de8ff1e9912204461a96
103dbdc3e18ff05f3dd61ad0ab1164786e8fa125
d7a414856c394028119f8ef496466a120eecc6044955562cb4745b90b5275391
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e55852-45bd-4ea6-98bd-7cf863b088c9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10381
x-amzn-requestid: 07399c7d-2033-4fbf-b4d3-20289b1abaac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqYFjHlBoAMFo2A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637406f0-0e5cb3c95668b5a31f6ec404;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:38:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FIZdY-ifSCB-OVNRGQW6Y_Q2DR0ZQr14PcgJUKG1Xfb703CJvhdXqA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 22:00:22 GMT
age: 16896
etag: "103dbdc3e18ff05f3dd61ad0ab1164786e8fa125"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd5bdc050716bb76afe8090fc81617e7
5109c156b180727767fc03c411190ccc0d3fb5fc
9b13e7838946c6654dda17886c2ca8d42de934acb93f4bddb1008dfa1bd1ea99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 20e508bd-6568-4225-9bee-c683a49d44f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUHkpIAMFfJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-7dc726b94a37fc667e2e6646;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: X3SUo1LP97TxraRav0ftskBhzWkTJInHaS44PW26yloF-dgD-bHBuA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 21:45:58 GMT
age: 17760
etag: "5109c156b180727767fc03c411190ccc0d3fb5fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP 104.18.21.226:0
Hash e9ee3639d3541ac2190d24c75cf4ac56
463d6a3fea18b8d03e14a247b4130c64fc3bcd6c
99ce21b63f16d927f4a29e5506dd75fbef5e4b78a581783552617d412e35875b
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 16 Nov 2022 02:41:58 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "D21CEF130DDC20A7EC8A31D347AF82E82023263F"
Expires: Wed, 16 Nov 2022 13:00:00 GMT
Last-Modified: Wed, 16 Nov 2022 01:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 845
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76acdee55bc8b529-OSL
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1149bf7a-1449-458c-b34b-f6938ba6a0dd.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1149bf7a-1449-458c-b34b-f6938ba6a0dd.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8d1a87d0ab3af52af1707f6776fca075
422630296e97c383fd72de826953b07560565252
1ca5e2eb29b5943468e4f0b147c73dc031c4446202c087d45c5a97e6238ed11b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1149bf7a-1449-458c-b34b-f6938ba6a0dd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9190
x-amzn-requestid: 360358b4-7cc5-4059-888d-0ed3a70e16ad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqZnbEjWIAMFRKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63740962-0471b6101f9dd14e43ec5ac2;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:49:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lZUjoZx8CdRJ0uathZ7M-eN0jx9EqxUF3D_LPoqOanOX1qgSLY_hcA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 22:18:17 GMT
age: 15821
etag: "422630296e97c383fd72de826953b07560565252"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F357cd6ac-cc6f-4fc8-846b-665a992369bd.png
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F357cd6ac-cc6f-4fc8-846b-665a992369bd.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7f53e6645ae6c5c1b96b371e561a34df
524b78bebc7fd71a34cb445e23751526dea99a9b
43480e4d45807997a2bfdde4230584717c2caa47c57e10eeff3091d893163d7c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F357cd6ac-cc6f-4fc8-846b-665a992369bd.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12436
x-amzn-requestid: 579569d4-c368-4cea-97dc-6ccdbc5771f5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqYF4HNjoAMFSDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637406f2-65f74c0126d29b1f62a60f75;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:38:58 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wNUJ1sP-CZXrNKOGuv90IgRwxTN5BRCb71Iqua4SGcHud2qg3O1TeQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 22:09:54 GMT
age: 16324
etag: "524b78bebc7fd71a34cb445e23751526dea99a9b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667acc-25d7-4d63-8fab-1711f6b4988c.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667acc-25d7-4d63-8fab-1711f6b4988c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 98802857df59f8eacd9211811cc59ae6
87e277a627c1085cad5c6e38bdd5100aa0a9ecee
102e73f690a972da6d3ab609ffab5f29884185d85c4230a19ec74d74c7320cf1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667acc-25d7-4d63-8fab-1711f6b4988c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8235
x-amzn-requestid: e8a91ec0-fa93-45b6-8dc8-a405c00242fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqY4_HANoAMFSvw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63740839-3ebbd38b0e3e774923ad019e;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:44:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: _u6Uhc-g_xPTRSYys5rD3GC00roubyJdBRuHruvoMLf-UEAB6_zdQw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 aa623e134417515bd2496cb01d5e5626.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 21:46:20 GMT
age: 17738
etag: "87e277a627c1085cad5c6e38bdd5100aa0a9ecee"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 73f5a5f64f86c457cc2558f44bbfbcd2
15c6a1f60ed86b20886f2b2025002b9392395880
04e20d91462edac11a6a3f2c9bb6a6de9ba23463f54a39c818d8f3f6d5d9be23
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 02:41:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 73f5a5f64f86c457cc2558f44bbfbcd2
15c6a1f60ed86b20886f2b2025002b9392395880
04e20d91462edac11a6a3f2c9bb6a6de9ba23463f54a39c818d8f3f6d5d9be23
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 02:41:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.quintaoimoveis.com.br/assets/css/bootstrap-submenu.css?v=1.68451615
191.6.211.57200 OK 6.5 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/bootstrap-submenu.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 31b5a95190836a9fceb965df09947b63
a66c33112d5441f2354efc7e734e91a50b0b47c8
2e4bd24586817b90acdaa9b88af5311bf2c4e314a0d9fc1c1c3d738e1e51fa10
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/bootstrap-submenu.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "1947-5e4f74c521cb5"
accept-ranges: bytes
content-length: 6471
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/animate.min.css?v=1.68451615
191.6.211.57200 OK 76 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/animate.min.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (460)
Hash d11ac1f04a7baaae9b5af32f76027d3f
3c570a47535c09e8b756612c2c385e5b9bb4fe00
ce17005c1639af7af95cde7a7683b2ecfee7192f2899106e7209f0a37bd73042
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/animate.min.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "12a55-5e4f74c51a39d"
accept-ranges: bytes
content-length: 76373
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/util.css?v=1.68451615
191.6.211.57200 OK 889 B URL HTTP/2 www.quintaoimoveis.com.br/assets/css/util.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash e154655b1313567592b1e2932dfd8341
98b50d91fa6ea0f8a269f172875821f434ad6a2e
53e435f7b895d3f04468a3b1e5c2e670b432a0a77736dc3d0cf3d58cad06dcaa
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/util.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "379-5e4f74c5f4bb5"
accept-ranges: bytes
content-length: 889
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/ie10-viewport-bug-workaround.css?v=1.68451615
191.6.211.57200 OK 518 B URL HTTP/2 www.quintaoimoveis.com.br/assets/css/ie10-viewport-bug-workaround.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 95c9d9598d5be1cf69a6341649eca4e2
71d4d986ffcdbfab7ef154c95993e54c28def77a
9485950ff928c4d006f35a8fe43e7c0ebdc7bc3e6dfb28d1334507fbd0b318d7
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/ie10-viewport-bug-workaround.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "206-5e4f74c56953d"
accept-ranges: bytes
content-length: 518
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/ie-emulation-modes-warning.js?v=1.68451615
191.6.211.57200 OK 2.2 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/ie-emulation-modes-warning.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash ca9f93eaf66619997f4c9e773e0e1e02
4d777efd46a68823ddf48b109c60080403b6d52b
159962d64c5d4c0276db83fe61cea114823a30a4ae01d5f66ad8e6af44f6ca1e
GET /assets/js/ie-emulation-modes-warning.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "8c7-5e4f74cd03dc5"
accept-ranges: bytes
content-length: 2247
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/fonts/flaticon/font/flaticon.css?v=1.68451615
191.6.211.57200 OK 2.5 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/fonts/flaticon/font/flaticon.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash a0240335bac7c1a06024356194a2397f
e71dec7655ffece83dee3ede6a3c96e1c194182f
f0cab9678721462f413ee70761632979f6887e5db2b3ad1fd5887f2fb4e6bfef
GET /assets/fonts/flaticon/font/flaticon.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:50 GMT
etag: "9a8-5e4f74d662c95"
accept-ranges: bytes
content-length: 2472
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/base_url/base_url.js?v=1.68451615
191.6.211.57200 OK 53 B URL HTTP/2 www.quintaoimoveis.com.br/assets/js/base_url/base_url.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 07d8e15637c9e3204c314a239dbd2129
2ef4b1006f248ac12ee6e5b3aad8523fc7c7de50
9074ab2a1e9e1677d6750a53d4b5919f1f7a449613752a65c744c1fc84c4d6f6
GET /assets/js/base_url/base_url.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Sep 2022 17:39:35 GMT
etag: "35-5e82de9b1e9f7"
accept-ranges: bytes
content-length: 53
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/ie10-viewport-bug-workaround.js?v=1.68451615
191.6.211.57200 OK 682 B URL HTTP/2 www.quintaoimoveis.com.br/assets/js/ie10-viewport-bug-workaround.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash e00b941fbb45e15c1fca528cdcce2444
f520b96b591f9aeffcd645cc9f803c9580cdb5ca
4ab77001090794c2f79060ada48f7ef5682a3c727dd31be876b59635e5b0fbe1
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/ie10-viewport-bug-workaround.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "2aa-5e4f74cd0ab25"
accept-ranges: bytes
content-length: 682
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery.scrollUp.js?v=1.68451615
191.6.211.57200 OK 2.4 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery.scrollUp.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (2437), with no line terminators
Hash a8f0a63d79286168ca27252e4b5e25a6
817a703bd3e0d6c4f054d269ccb8642dd0c3140e
9c91de469811a71271b366f9e326fee8769c33053cd3e378cd8c72780e01f214
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery.scrollUp.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:41 GMT
etag: "985-5e4f74cdbfd95"
accept-ranges: bytes
content-length: 2437
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/bootstrap.min.css?v=1.68451615
191.6.211.57200 OK 121 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/bootstrap.min.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (65371)
Size 121 kB (121260 bytes)
Hash 2f624089c65f12185e79925bc5a7fc42
8eb176c70b9cfa6871b76d6dc98fb526e7e9b3de
eece6e0c65b7007ab0eb1b4998d36dafe381449525824349128efc3f86f4c91c
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/bootstrap.min.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "1d9ac-5e4f74c54cc35"
accept-ranges: bytes
content-length: 121260
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/bootstrap-submenu.js?v=1.68451615
191.6.211.57200 OK 2.8 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/bootstrap-submenu.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (2610)
Hash 32d85e0f496241e5de6eb2e040883b84
0d481a4fe582ebb6e97166e68b567565ba61a7f9
9a39e0cba88dc9b0089d9717167bce3bfc401e702968bd5a0ac453cf21e45257
GET /assets/js/bootstrap-submenu.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:39 GMT
etag: "ae4-5e4f74ccb09bd"
accept-ranges: bytes
content-length: 2788
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/magnific-popup.css?v=1.68451615
191.6.211.57200 OK 7.5 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/magnific-popup.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 8ff5387a95b3124e20d64ae8acc62b20
406ef5543359083d41c984387138550d6a855331
23f703d87caf866aae9e0bcef6f7efec2f5de57476c99e2adbcf32c38fc12844
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/magnific-popup.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "1d6c-5e4f74c5a1b95"
accept-ranges: bytes
content-length: 7532
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/correcao.css?v=1.68451615
191.6.211.57200 OK 7.2 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/correcao.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash ade5dd3c057e148671941b338f7dfdd1
27cac69172ffa185ad5b018815dd9dfc0c49ee9a
ac9ae705f7c98c43955ffca7c7f11bf48b18cada8f81b088916912978b5c839a
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/correcao.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 27 Sep 2022 12:03:57 GMT
etag: "1c02-5e9a77057c5ad"
accept-ranges: bytes
content-length: 7170
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/bootstrap-select.min.css?v=1.68451615
191.6.211.57200 OK 6.7 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/bootstrap-select.min.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (6433)
Hash 902c7678a616b665addf9db32dd0a450
3a55108519bd48fe572767f24b5bdb72305fd98b
043bb6a2c76a8d86c8f44486e792cb94743cb7fb758eb7af5162082a432b81c1
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/bootstrap-select.min.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:31 GMT
etag: "19fa-5e4f74c505f65"
accept-ranges: bytes
content-length: 6650
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/fonts/linearicons/style.css?v=1.68451615
191.6.211.57200 OK 8.3 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/fonts/linearicons/style.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash aa4cd95fc370b1cc4247fec9e0f946eb
890ddf42c64e544ed82e55c325de8f6d9dcf70e4
f5c203b6416a054de195921e85165e4d66fd303ea8d20982a190fede7b673576
Analyzer Verdict Alert fortinet Phishing
GET /assets/fonts/linearicons/style.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:43 GMT
etag: "2098-5e4f74d043a5d"
accept-ranges: bytes
content-length: 8344
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/leaflet.css?v=1.68451615
191.6.211.57200 OK 10 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/leaflet.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash dd02f3af507ad0c157ee728b60563227
b5c1ffbf24d25c2631d07382eab595a499d13a51
054c8428a61c92550ff6eec8a07a5d06a4b550d6e72c09d73fec7eadbdda0b19
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/leaflet.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "2776-5e4f74c585675"
accept-ranges: bytes
content-length: 10102
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/dropzone.css?v=1.68451615
191.6.211.57200 OK 12 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/dropzone.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 8b6c7282340f2f62e4acb5d5827779ba
cbe0c8d5295a90fe1e7bd7c374f7bd47a999d5d1
aff1f8176ca63fefded4df9f6b550a8051d1001d61b051e64f7ba18019a6d198
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/dropzone.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "2d16-5e4f74c55aec5"
accept-ranges: bytes
content-length: 11542
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/map.css
191.6.211.57200 OK 16 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/map.css
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash d1d1723f92584b38a404df1097b07862
296864f26e1988b795d8133cde646fde8df76d53
f479285a67c398bcc26da9910ee8a5497dc808ff1fb6ff434e223cfcdac68157
GET /assets/css/map.css HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "3f49-5e4f74c5a8cdd"
accept-ranges: bytes
content-length: 16201
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/skins/default.css?v=1.68451615
191.6.211.57200 OK 16 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/skins/default.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 2fa7531b7aa1b830821d89d6d9092f76
8b0d803bafe43629037837b549a9b17e6d894a66
3a57fb281d0ca108530d7647c851659c6650412ea1d07d5f1f757e83ba4b7ca7
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/skins/default.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:23:41 GMT
etag: "3f4b-5e4f76d0dd3bd"
accept-ranges: bytes
content-length: 16203
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/wow.min.js?v=1.68451615
191.6.211.57200 OK 8.4 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/wow.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (8386)
Hash 43df281b12fea21afa7533000b77b9da
bbb906a10283f31213d85aa95e11a489c9c27b4e
6bc4d4442fe40defc9579e89683d9c4bd0c9bc6b5870c8692407028b98e16233
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/wow.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:41 GMT
etag: "20e0-5e4f74ce4fa5d"
accept-ranges: bytes
content-length: 8416
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/fonts/font-awesome/css/font-awesome.min.css?v=1.68451615
191.6.211.57200 OK 31 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/fonts/font-awesome/css/font-awesome.min.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (30819)
Hash 4921ec3a59f0521419db0bb832066fe0
d97430435f4473ec207fba2f36f67742da4e94ce
a8bd8b57e92a4ddb091c315b0b365a72fedd552cabef88b6a38f9ab4f26c138b
Analyzer Verdict Alert fortinet Phishing
GET /assets/fonts/font-awesome/css/font-awesome.min.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:51 GMT
etag: "7906-5e4f74d760345"
accept-ranges: bytes
content-length: 30982
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/jquery.mCustomScrollbar.css?v=1.68451615
191.6.211.57200 OK 53 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/jquery.mCustomScrollbar.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 41605be1cba276caf15a9a84b0d2719e
a0867811f1ec9b61f55ecfc13143c416322e9a99
ab95d95996d636db32d0daf3c8ad927d7659e1fb3e01cd56a69ce01d28a976f1
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/jquery.mCustomScrollbar.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "cf91-5e4f74c585675"
accept-ranges: bytes
content-length: 53137
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/app.js?v=1.68451615
191.6.211.57200 OK 10 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/app.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 2965018e8ae0fcc667de6c80d53e65ea
13b507d80df05919d38d837fa9ade7b94b6a8a95
aabe5b6d2828ccd8ad3d3f68c5454dd77d264c42137f3303152e67e791e9528e
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/app.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:39 GMT
etag: "28d0-5e4f74cc96bad"
accept-ranges: bytes
content-length: 10448
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/style.css?v=1.68451615
191.6.211.57200 OK 134 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/style.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Size 134 kB (134453 bytes)
Hash ade0d52419543bc466619c933a3e574a
17d89e1857d38e22f057d653982697e859c8b5e7
730c3ce243967b130d9125081758bbac74b02ef7e3704f55935f181259cf7c37
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/style.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:26:50 GMT
etag: "20d35-5e4f77850559d"
accept-ranges: bytes
content-length: 134453
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 83b2cc8ea40190737f2d7ebb9681df7c
c4e86e12dad1281f1bd8647d39745e4727fbd29e
c24433a6381b52df17e3cf1cb16f7e3c75e9a57c1174e720a091f4c485c53dbb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 02:42:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
172.217.21.163200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 172.217.21.163:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.quintaoimoveis.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Nov 2022 05:42:51 GMT
expires: Fri, 10 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 507549
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 83b2cc8ea40190737f2d7ebb9681df7c
c4e86e12dad1281f1bd8647d39745e4727fbd29e
c24433a6381b52df17e3cf1cb16f7e3c75e9a57c1174e720a091f4c485c53dbb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 02:42:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.quintaoimoveis.com.br/assets/js/jquery.magnific-popup.min.js?v=1.68451615
191.6.211.57200 OK 20 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery.magnific-popup.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (20087)
Hash 2ff3269846e36a0bdb0c5ca8877f4b80
d87cd0d6e37b3bf5d57498c11cdc222e40fe5c65
d199b3eae4ec01cfe0be1e9c5ec06391ea646b47aba35b591e6cdf67bb8cd284
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery.magnific-popup.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "4f4b-5e4f74cd736ed"
accept-ranges: bytes
content-length: 20299
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/img/logos/logo.png
191.6.211.57200 OK 44 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/img/logos/logo.png
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type PNG image data, 450 x 209, 8-bit/color RGBA, non-interlaced\012- data
Hash 3894f71f44ea66958d7797e4ac28ba50
a778630ab3e77df4d01ff3670b173a970845e47a
ff7f50833a406b3be1de0dc1646b18c4137479367153ebbfffcc7dc1a1af814f
GET /assets/img/logos/logo.png HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:23:19 GMT
etag: "ad11-5e4f76bbc5935"
accept-ranges: bytes
content-length: 44305
cache-control: max-age=1800
content-type: image/png
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/img/logos/footer-logo.png
191.6.211.57200 OK 44 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/img/logos/footer-logo.png
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type PNG image data, 450 x 209, 8-bit/color RGBA, non-interlaced\012- data
Hash 3894f71f44ea66958d7797e4ac28ba50
a778630ab3e77df4d01ff3670b173a970845e47a
ff7f50833a406b3be1de0dc1646b18c4137479367153ebbfffcc7dc1a1af814f
GET /assets/img/logos/footer-logo.png HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:28:47 GMT
etag: "ad11-5e4f77f548da5"
accept-ranges: bytes
content-length: 44305
cache-control: max-age=1800
content-type: image/png
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery.mask.js?v=1.68451615
191.6.211.57200 OK 23 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery.mask.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash e86166037cdacd2e8b8c4428077d6cb8
79028d2e5e6334eaaabb7f363d2aaa016988f64c
3edcd35f57ed9849a3f18522017d304c843e75d4c0195b763222ccb06b003313
GET /assets/js/jquery.mask.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "5a58-5e4f74cd907c5"
accept-ranges: bytes
content-length: 23128
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/bootstrap-select.min.js?v=1.68451615
191.6.211.57200 OK 34 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/bootstrap-select.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (32019)
Hash e79ba51275bd09154cd3d4e155444c2b
4455ee98d9c7d861a373842e3f8a265f35ca4a9f
2d7c202c80ee4edf9c89abb2c1b3759ed2ba0bf0061d8642b8ef894fb421ad97
GET /assets/js/bootstrap-select.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "84ae-5e4f74ccbfbed"
accept-ranges: bytes
content-length: 33966
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/bootstrap.min.js?v=1.68451615
191.6.211.57200 OK 37 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/bootstrap.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (32003)
Hash c5b5b2fa19bd66ff23211d9f844e0131
791aa054a026bddc0de92bad6cf7a1c6e73713d5
2979f9a6e32fc42c3e7406339ee9fe76b31d1b52059776a02b4a7fa6a4fd280a
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/bootstrap.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "9004-5e4f74ccd53ad"
accept-ranges: bytes
content-length: 36868
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery.mCustomScrollbar.concat.min.js?v=1.68451615
191.6.211.57200 OK 46 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery.mCustomScrollbar.concat.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (32001)
Hash 59af70cc2559b47db8864e69e016d30d
3962c007c80d2c23508de4cfe8a23529f1a5c498
44a0a9aa817e76bc2ac4f824f298418dda834783fe0ea0e721b97aaf82cd42be
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery.mCustomScrollbar.concat.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:41 GMT
etag: "b1ab-5e4f74cdb70f5"
accept-ranges: bytes
content-length: 45483
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery-2.2.0.min.js?v=1.68451615
191.6.211.57200 OK 86 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery-2.2.0.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (32069)
Hash 93c4b563622d278b1065690a3d93709e
f00d128cf399f17322b1d4ee02fa8cd892e081bd
601c06474a16936670a0477da2a777ccfca3301e3857204ec9b55dfa2c45287e
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery-2.2.0.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "14e54-5e4f74cd3471d"
accept-ranges: bytes
content-length: 85588
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/dropzone.js?v=1.68451615
191.6.211.57200 OK 77 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/dropzone.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (3297)
Hash 148ed1fee44574dccc70604317a7bb4b
1327a4b332257815b29ae3628d1de3781c34a26a
ccc491ef63fd46cfb869d1986d96aed49656ba22c1661db81121209d2863cfd5
GET /assets/js/dropzone.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "12bb5-5e4f74cce9bcd"
accept-ranges: bytes
content-length: 76725
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery.mb.YTPlayer.js?v=1.68451615
191.6.211.57200 OK 103 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery.mb.YTPlayer.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Size 103 kB (103147 bytes)
Hash ade725c997b8d6b1601059b5a83e83fc
134b15018533ae7ed8042619a00c2e8b7f9d2bbc
fee38b0502add6d349427a0f6f2dfc581292a39b5e1d3dc244c100089cc99fb1
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery.mb.YTPlayer.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "192eb-5e4f74cda4bfd"
accept-ranges: bytes
content-length: 103147
cache-control: max-age=1800
content-type: application/javascript
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/lib/slick-1.8.1/slick/slick-theme.css?v=1.68451615
191.6.211.57200 OK 3.1 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/lib/slick-1.8.1/slick/slick-theme.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash a4b02d957b44571b307c0ddb206e0c94
23acd31d6664488fadc30868c477816f55ae0ad4
8a311dee53722942df8ec4a6cdaba5e9e71e44f23d8cde49f09f59df2eeb7dd6
Analyzer Verdict Alert fortinet Phishing
GET /assets/lib/slick-1.8.1/slick/slick-theme.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:57 GMT
etag: "c49-5e4f74dd7804d"
accept-ranges: bytes
content-length: 3145
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:59 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/lib/slick-1.8.1/slick/slick.css?v=1.68451615
191.6.211.57200 OK 2.1 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/lib/slick-1.8.1/slick/slick.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 1856c916f957fb90b684749a98a1705a
f217b9ee12b3e744fa9ff7dd661927de1eba8232
0d86ed0aebe5aa5af7069a67735fc47578b9c926406e1c7baced692bc4c0a651
Analyzer Verdict Alert fortinet Phishing
GET /assets/lib/slick-1.8.1/slick/slick.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:57 GMT
etag: "848-5e4f74dd93d9d"
accept-ranges: bytes
content-length: 2120
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:41:59 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/img/loader.gif
191.6.211.57200 OK 27 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/img/loader.gif
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type GIF image data, version 89a, 38 x 38\012- data
Hash 8c29ba58bf7e5289fed70efcb011b398
44d4f1e26aee06150e27727dd31709415846e942
64a4a69d295326682b71712b0039edb407a2c810fa4d9695b4ef93b7862e4c04
GET /assets/img/loader.gif HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/assets/css/style.css?v=1.68451615
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:37 GMT
etag: "699b-5e4f74c9ff665"
accept-ranges: bytes
content-length: 27035
cache-control: max-age=1800
content-type: image/gif
date: Wed, 16 Nov 2022 02:41:59 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
191.6.211.57200 OK 77 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/assets/fonts/font-awesome/css/font-awesome.min.css?v=1.68451615
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:52 GMT
etag: "12d68-5e4f74d84ef95"
accept-ranges: bytes
content-length: 77160
date: Wed, 16 Nov 2022 02:41:59 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/img/favicon.ico
191.6.211.57200 OK 3.7 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/img/favicon.ico
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type PNG image data, 60 x 36, 8-bit/color RGBA, non-interlaced\012- data
Hash 59ca4dd6141956e8dd4c8c5fd71b3632
d0bfddd4cb482ad28f3bbe21b86a6ca0de3da5d2
cc2807c577cdada87f6beaf480daf58712df7c3654f626dc6dddc40b1cf3b532
GET /assets/img/favicon.ico HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Sep 2022 18:26:37 GMT
etag: "e51-5e82e91ede92a"
accept-ranges: bytes
content-length: 3665
cache-control: max-age=1800
content-type: image/x-icon
date: Wed, 16 Nov 2022 02:42:00 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/skins/default.css
191.6.211.57200 OK 16 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/skins/default.css
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 2fa7531b7aa1b830821d89d6d9092f76
8b0d803bafe43629037837b549a9b17e6d894a66
3a57fb281d0ca108530d7647c851659c6650412ea1d07d5f1f757e83ba4b7ca7
GET /assets/css/skins/default.css HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
Cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:23:41 GMT
etag: "3f4b-5e4f76d0dd3bd"
accept-ranges: bytes
content-length: 16203
cache-control: max-age=1800
content-type: text/css
date: Wed, 16 Nov 2022 02:42:00 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
191.6.211.57200 OK 0 B URL HTTP/2 www.quintaoimoveis.com.br/uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Analyzer Verdict Alert fortinet Phishing
GET /uploads/disk/wet/tiop/c0696fde2794f558af8019e40cdb3473/Up-dating.php HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
vary: Accept-Encoding
set-cookie: PHPSESSID=1c7ccbdef0943d0c1e1c1ca6a0b0d30b; path=/
content-type: text/html; charset=UTF-8
date: Wed, 16 Nov 2022 02:41:58 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,300,600,700,800%7CPlayfair+Display:400,700%7CRoboto:100,300,400,400i,500,700
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,300,600,700,800%7CPlayfair+Display:400,700%7CRoboto:100,300,400,400i,500,700
IP 142.250.74.10:0
GET /css?family=Open+Sans:400,300,600,700,800%7CPlayfair+Display:400,700%7CRoboto:100,300,400,400i,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 16 Nov 2022 02:41:58 GMT
date: Wed, 16 Nov 2022 02:41:58 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2