Overview

URLg2gesso.com.br/cc/auth.php
IP 162.214.69.46 (United States)
ASN#46606 UNIFIEDLAYER-AS-1
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-04 06:09:02 UTC
StatusLoading report..
IDS alerts0
Blocklist alert8
urlquery alerts No alerts detected
Tags None

Domain Summary (12)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-03 18:20:10 UTC 143.204.55.27
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-04 04:44:39 UTC 34.120.237.76
www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-09-04 04:35:59 UTC 142.250.74.72
fonts.gstatic.com (5) 0 2014-08-29 13:43:22 UTC 2022-09-04 04:35:59 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-03 05:35:54 UTC 34.217.237.91
ocsp.pki.goog (4) 175 2017-06-14 07:23:31 UTC 2022-09-04 04:49:47 UTC 142.250.74.3
www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-09-03 22:58:04 UTC 142.250.74.174
r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-09-04 04:46:21 UTC 23.36.77.32
g2gesso.com.br (25) 0 2017-02-01 19:20:48 UTC 2022-09-03 15:34:14 UTC 162.214.69.46 Unknown ranking
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-03 05:49:56 UTC 143.204.55.35
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-04 04:35:24 UTC 34.117.237.239
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-03 14:30:54 UTC 93.184.220.29

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-04 2 g2gesso.com.br/cc/auth.php Phishing
2022-09-04 2 g2gesso.com.br/wp-content/et-cache/global/et-divi-customizer-global.min.css (...) Phishing
2022-09-04 2 g2gesso.com.br/cc/auth.php Phishing
2022-09-04 2 g2gesso.com.br/wp-content/cache/wpo-minify/1662129110/assets/wpo-minify-hea (...) Phishing
2022-09-04 2 g2gesso.com.br/wp-content/plugins/wordpress-whatsapp-support/assets/fonts/w (...) Phishing
2022-09-04 2 g2gesso.com.br/wp-content/themes/Divi/core/admin/fonts/modules/base/modules.ttf Phishing
2022-09-04 2 g2gesso.com.br/wp-content/cache/wpo-minify/1662129110/assets/wpo-minify-foo (...) Phishing
2022-09-04 2 g2gesso.com.br/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.ttf Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 162.214.69.46
Date UQ / IDS / BL URL IP
2023-03-20 18:11:00 +0000 0 - 0 - 5 g2gesso.com.br/cc/auth.php?md=oiygsduzacrlevw (...) 162.214.69.46
2023-03-20 08:19:44 +0000 0 - 0 - 7 g2gesso.com.br/cc/auth.php 162.214.69.46
2022-09-17 14:27:59 +0000 0 - 0 - 6 g2gesso.com.br/cc/auth.php?jQBnsSpGzYRmOXcJMT (...) 162.214.69.46
2022-09-17 14:27:21 +0000 0 - 0 - 6 g2gesso.com.br/cc/auth.php?fKbBCrgqYmvxzjWwnu (...) 162.214.69.46
2022-09-17 10:46:40 +0000 0 - 0 - 6 g2gesso.com.br/cc/auth.php?tzkcepilfbmtbcwzxv (...) 162.214.69.46


Last 5 reports on ASN: UNIFIEDLAYER-AS-1
Date UQ / IDS / BL URL IP
2023-03-30 20:03:28 +0000 3 - 0 - 1 shopclassicstyles.com/Email/verification/xglo (...) 69.49.244.31
2023-03-30 20:03:23 +0000 3 - 0 - 0 mypwanbusinesswebsite.com/Email/verification/ (...) 162.214.68.182
2023-03-30 20:02:15 +0000 3 - 0 - 1 dietonbudget.com/Email/verification/mdwoknh/r (...) 69.49.244.31
2023-03-30 20:02:03 +0000 3 - 0 - 1 dietonbudget.com/Email/verification/ax3xi36/d (...) 69.49.244.31
2023-03-30 20:02:02 +0000 3 - 0 - 0 mypwanbusinesswebsite.com/Email/verification/ (...) 162.214.68.182


Last 5 reports on domain: g2gesso.com.br
Date UQ / IDS / BL URL IP
2023-03-20 18:11:00 +0000 0 - 0 - 5 g2gesso.com.br/cc/auth.php?md=oiygsduzacrlevw (...) 162.214.69.46
2023-03-20 08:19:44 +0000 0 - 0 - 7 g2gesso.com.br/cc/auth.php 162.214.69.46
2022-09-17 14:27:59 +0000 0 - 0 - 6 g2gesso.com.br/cc/auth.php?jQBnsSpGzYRmOXcJMT (...) 162.214.69.46
2022-09-17 14:27:21 +0000 0 - 0 - 6 g2gesso.com.br/cc/auth.php?fKbBCrgqYmvxzjWwnu (...) 162.214.69.46
2022-09-17 10:46:40 +0000 0 - 0 - 6 g2gesso.com.br/cc/auth.php?tzkcepilfbmtbcwzxv (...) 162.214.69.46


No other reports with similar screenshot

JavaScript

Executed Scripts (16)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (54)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 04 Sep 2022 05:43:55 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: LmeRtTN9sk3ppyBThSn7o0O2ExwkOHkqtCuTIEI-RJWw11mcoG7f8w==
Age: 1496


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    91dd975a7b17b2922dd23c0e49314e40
Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13239
Expires: Sun, 04 Sep 2022 09:49:30 GMT
Date: Sun, 04 Sep 2022 06:08:51 GMT
Connection: keep-alive

                                        
                                            GET /cc/auth.php HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         162.214.69.46
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sun, 04 Sep 2022 06:08:50 GMT
Server: Apache
Location: https://g2gesso.com.br/cc/auth.php
Content-Length: 242
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   242
Md5:    127f1f7bbb97849e937a86f27891805f
Sha1:   9ae9533e3932cf8e14bede156aacf1a00a29fd75
Sha256: 4e6ae13f3177998771c0edee5b24ad5a1b24061d0532b14760c663c6535a5cfe

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 04 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MRjzqHkAtroc5_T-Jye2h6NFJ3L0PAAYVSXS3WSICz-FOVcLLHrnLQ==
age: 17614
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 04 Sep 2022 06:08:51 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 04 Sep 2022 05:38:16 GMT
Expires: Sun, 04 Sep 2022 05:52:09 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gbrvQbCWz7fNHIIXKlrC2lsk2KqwGKmTZo5nFnaPaag3iW5XFg6IQQ==
Age: 1835


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3764
Cache-Control: 'max-age=158059'
Date: Sun, 04 Sep 2022 06:08:51 GMT
Last-Modified: Sun, 04 Sep 2022 05:06:07 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aeUdFudrG8cNil9seD7cGw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.217.237.91
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Bf1b+BHCARKpDvcncsfliIENYo4=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13169
Expires: Sun, 04 Sep 2022 09:48:22 GMT
Date: Sun, 04 Sep 2022 06:08:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13169
Expires: Sun, 04 Sep 2022 09:48:22 GMT
Date: Sun, 04 Sep 2022 06:08:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13169
Expires: Sun, 04 Sep 2022 09:48:22 GMT
Date: Sun, 04 Sep 2022 06:08:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13169
Expires: Sun, 04 Sep 2022 09:48:22 GMT
Date: Sun, 04 Sep 2022 06:08:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13169
Expires: Sun, 04 Sep 2022 09:48:22 GMT
Date: Sun, 04 Sep 2022 06:08:53 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09148d75-a4a3-47e6-8d91-01e8dfad4bc7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8931
x-amzn-requestid: cfc0940f-ad6a-4535-91b7-70b200af68d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wwGEVEoAMFriw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c800-5b6e6e5e3401eba533fb63df;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: aa71ssSsXM8Z0Q2V4AitycF3hefEZXNqIYsr0vsJyhpE9cDpNEwh6Q==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:14:56 GMT
age: 28437
etag: "5d5c724e26af57967b9a132a77d3986ba8d6ed9c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8931
Md5:    0eecb70391b63b662d13355e32d95ea1
Sha1:   5d5c724e26af57967b9a132a77d3986ba8d6ed9c
Sha256: 2c7f2aa1c725a5d39daf44ee746bb24b5c15aab41c67cf160814f7f87d1aacdf
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9690
x-amzn-requestid: 614c99f8-116a-4603-bcde-3fbd5bfa14d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wx1HInIAMFiYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c80b-25c09c3227d72395408782f0;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5_jCLvdAC-XR-ax3RUbbx9275KPwACOPtAMxSbmv-aP-Lra4sC5zvw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:51:41 GMT
age: 29832
etag: "babb88202741bbf2d4fd25e0731a4a7a6fcc28f8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9690
Md5:    1bdfdf7e36f78f2f0e4d7ede9fdb76a8
Sha1:   babb88202741bbf2d4fd25e0731a4a7a6fcc28f8
Sha256: 949ea108642789e1014150909060f11d99608f082760d0e868a90282f2768d43
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48ddd9c9-1923-443a-8dbf-f936630b1f9b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4615
x-amzn-requestid: a28cc354-9caf-45e8-805e-a9d076f4c55d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wxXFsZIAMFbVQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c808-118caff17f74408d6ba251b9;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WHCYmwxGwIVneoRpk4rVJ_GVWnEhyayaW_Uj9ejqyTsOFab8oJ9RGA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:47:53 GMT
etag: "c9e50dd6d25825a3fff305261dc8f85a7113150a"
age: 30060
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4615
Md5:    7602d55b1969744668194d6433ad2490
Sha1:   c9e50dd6d25825a3fff305261dc8f85a7113150a
Sha256: 9ab721edb038aad74dabe751f7790fe21915884893ea9f471e407ae526495701
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1814521f-0914-48f7-8ea7-8c2d8155c055.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10147
x-amzn-requestid: 7c2c3756-fc7b-4386-8c88-f1b42beed37a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XxLzHEAHoAMFV8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631059ad-063448962d443e107716b726;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 07:05:17 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZGR4HPl3KOfSdZzialXKeNrH_DzJzUvyLlwFtx0MQOp0VNsOtdC-bg==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 16:25:21 GMT
age: 49412
etag: "19288de373e2bc69a51c9e0c6f49f5cf4e0d8759"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10147
Md5:    d8aa56bbbb56df10ff381fc5dd250e09
Sha1:   19288de373e2bc69a51c9e0c6f49f5cf4e0d8759
Sha256: 68c4508940b207a3e1d32a38a9f82b1fbabbb97430fe0a5e2ddc75d62c4bdfcc
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8688
x-amzn-requestid: 1c5fbc89-8ce8-4792-b713-f2c0ceeab737
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wifFJYoAMFi0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7a9-214311e155c661ff77d89906;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wd9SF3txQNTVUaSPcKQ_nQfPt1pBjFbuHzSZiQjfbGBSb-i7J8Rgjg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:44:29 GMT
age: 30264
etag: "2768253dacaaad6cb498c6b2eb7694208b0ce0a6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8688
Md5:    6bb4b1d74f1443bc3328301ab3ae6464
Sha1:   2768253dacaaad6cb498c6b2eb7694208b0ce0a6
Sha256: 07dcc95dab7757402998a5a61b540c965ce95c8bd51a814a09438981693b563a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6541786-c935-4aec-88da-fa887f01bef4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6467
x-amzn-requestid: 169eaa82-3472-4aca-a26e-c78080d20bc6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XxLzHFWDIAMFeeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631059ad-6df745c367d8e79b57e34c24;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 07:05:17 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0WMwVsmclvutywUm14huz5mAirMV5WqfpCKSgxIIN7lO7vI-vvb8vw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 11:20:22 GMT
age: 67711
etag: "87f505d3df68138cf008a469a5d04096a51c93e8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6467
Md5:    536d923c7abb89ac7d14f3e6e2e5dc90
Sha1:   87f505d3df68138cf008a469a5d04096a51c93e8
Sha256: ba9e66c37fd20175d6ebd01b9f92d5a514f926ad6129525802434bca05f1412a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 06:08:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=UA-198107375-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 04 Sep 2022 06:08:53 GMT
expires: Sun, 04 Sep 2022 06:08:53 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41844
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1615)
Size:   41844
Md5:    5959f8904a1dceb2ea6f8f5af348b4a0
Sha1:   04aba7d6b11a34a5dd4cf877d1399de8a37ea34b
Sha256: 5825b8b8d05effe35b8553b112f6acc2257da56d775f5477e7d161fc7d2ab4ec
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 06:08:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/et-cache/global/et-divi-customizer-global.min.css?ver=1662128868 HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 04 Sep 2022 06:08:53 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 14:27:48 GMT
Accept-Ranges: bytes
Content-Length: 7717
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (7717), with no line terminators
Size:   7717
Md5:    ca22177a92e4ed812dad81a76d86cc16
Sha1:   43ab2f629f800a9a76dee80f473bc410b0378a8f
Sha256: 3079109ac501cd9d47bce51ecb11043c2fac795af170a3925e34184bd23f327d

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /cc/auth.php HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         162.214.69.46
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Sun, 04 Sep 2022 06:08:51 GMT
Server: Apache
WPO-Cache-Status: not cached
WPO-Cache-Message: The request extension is not suitable for caching
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://g2gesso.com.br/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (26340), with CRLF, LF line terminators
Size:   131131
Md5:    6d7fef6aaa9ed2ce211554c3e01bdf40
Sha1:   2e10b8bede6229193718af170c24d74288484214
Sha256: a2aded7675baee0307296fd351437845ebd3af2bf999335140705e8083c58fcf

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/cache/wpo-minify/1662129110/assets/wpo-minify-header-551b1660.min.js HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 04 Sep 2022 06:08:53 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 14:38:50 GMT
Accept-Ranges: bytes
Content-Length: 127980
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   127980
Md5:    f1f3eb6ece9a8f20b23ec3d2d76ee1b2
Sha1:   c0a9ab11ec3d515ac5ce33c6e4916afb04114586
Sha256: 912be756fe5947eed30c7fcf07ae1a1474e9d06d7f01616a361884a5feeda8e1

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/cache/wpo-minify/1662129110/assets/wpo-minify-footer-99a91744.min.css HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 04 Sep 2022 06:08:53 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 14:38:50 GMT
Accept-Ranges: bytes
Content-Length: 140647
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   140647
Md5:    dcad575419a77032b20c197f5a112bd9
Sha1:   9a78020eb66ad3ca782f1b91f78527f447660a45
Sha256: 722d29497272d63491c32b6373b4bc925dddb7f59ecbfbfb8a70a48c455efda5
                                        
                                            GET /wp-content/cache/wpo-minify/1662129110/assets/wpo-minify-header-7496449b.min.css HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 04 Sep 2022 06:08:53 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 14:43:11 GMT
Accept-Ranges: bytes
Content-Length: 218212
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   218212
Md5:    e00b73296189b6420946d67c9c3c9134
Sha1:   99488f83b157a4b2ab9a93acb1a3be69374f43b8
Sha256: b362422a095cf49a39307fa0d8b62b8603c3ecefedcecc52d830f5d19ce6fb71
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 06:08:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2020/01/home-icone.png HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 04 Sep 2022 06:08:55 GMT
Server: Apache
Last-Modified: Fri, 19 Nov 2021 12:00:53 GMT
Accept-Ranges: bytes
Content-Length: 1059
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Size:   1059
Md5:    a901e5e59103c4e36eb38e7fc0f57808
Sha1:   8cb7ac92002e692547cad5b932e9ad2d2fc73ea1
Sha256: 7992745b4f46e498f9bca9841d7be298cd9241edcf37f993c67d2cea1d5cf4b4
                                        
                                            GET /wp-content/uploads/2020/01/servi%C3%A7os-icone.png HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 04 Sep 2022 06:08:55 GMT
Server: Apache
Last-Modified: Fri, 19 Nov 2021 12:00:52 GMT
Accept-Ranges: bytes
Content-Length: 1323
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Size:   1323
Md5:    23357f27f44678baa1205da2e73789db
Sha1:   d67ac3de33ddf11c1f0c1c2f284ad15cde90e754
Sha256: e62899ea0bb6ff767a6c4eaa5b66c2fbbfe147da35ddea75bc410c2eba2ee601
                                        
                                            GET /wp-content/uploads/2020/01/empresa-icone.png HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 04 Sep 2022 06:08:55 GMT
Server: Apache
Last-Modified: Fri, 19 Nov 2021 12:00:55 GMT
Accept-Ranges: bytes
Content-Length: 1528
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Size:   1528
Md5:    7cf4faf67d85abc61da2106a36e47657
Sha1:   31a1aac592c600459b79bbe7292be1d960d3a690
Sha256: a42770de0d6f1b6d2067edcdeded1cb797925cf906a51c521a1961556ea00175
                                        
                                            GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://g2gesso.com.br
Connection: keep-alive
Referer: https://g2gesso.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22084
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 Aug 2022 22:41:42 GMT
expires: Tue, 29 Aug 2023 22:41:42 GMT
cache-control: public, max-age=31536000
age: 458833
last-modified: Mon, 15 Aug 2022 18:14:59 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 22084, version 1.0\012- data
Size:   22084
Md5:    bab4daa6bec06781aa7262eca0be0ed4
Sha1:   b896fcea50433114a0433c9c8117677a875f1116
Sha256: ee901a5f44fcc6ea6ab97fb2751ce51af915d16dd99995a29a5905d2ce4b0831
                                        
                                            GET /wp-content/plugins/revslider/public/assets/assets/dummy.png HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 04 Sep 2022 06:08:55 GMT
Server: Apache
Last-Modified: Wed, 31 Aug 2022 16:05:36 GMT
Accept-Ranges: bytes
Content-Length: 68
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Size:   68
Md5:    2a637d3d825673c0e3462fa4ed9a1c5c
Sha1:   81668d396da22832d75a986407ff10035e0d5899
Sha256: 69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 06:08:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4uaVI.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://g2gesso.com.br
Connection: keep-alive
Referer: https://g2gesso.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21516
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 00:56:50 GMT
expires: Wed, 30 Aug 2023 00:56:50 GMT
cache-control: public, max-age=31536000
age: 450725
last-modified: Mon, 15 Aug 2022 18:12:10 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 21516, version 1.0\012- data
Size:   21516
Md5:    90135ea44811b2d9610c33e07068fdb0
Sha1:   84ef1a8343877a598f1c7cbae56f35ded54a1787
Sha256: bd067b886f4a67dd25c08fe73777bce7f506beb4c09d17d9f036f8a90901efd2
                                        
                                            GET /s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV4ewA.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://g2gesso.com.br
Connection: keep-alive
Referer: https://g2gesso.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 01:00:54 GMT
expires: Wed, 30 Aug 2023 01:00:54 GMT
cache-control: public, max-age=31536000
age: 450481
last-modified: Mon, 15 Aug 2022 18:28:07 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23704, version 1.0\012- data
Size:   23704
Md5:    3d4a6df8d47f0085c3bf7bd90563e9eb
Sha1:   f0d96d332787d0a8604f2b99dde7f3b947942cf5
Sha256: d00bea31ec0d15e0e6013225b870d1f39fa2e26663d192c8520494c6156c0569
                                        
                                            GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4uaVI.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://g2gesso.com.br
Connection: keep-alive
Referer: https://g2gesso.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22212
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 00:57:39 GMT
expires: Wed, 30 Aug 2023 00:57:39 GMT
cache-control: public, max-age=31536000
age: 450676
last-modified: Mon, 15 Aug 2022 18:15:01 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 22212, version 1.0\012- data
Size:   22212
Md5:    e62adebf67147c481b9c00011e2c5d48
Sha1:   3af42ef356fa413fd162c56a7b11b8d34a61cefb
Sha256: 17ec0c20d179cf39cbbb164c18165e8a35e9678d5602c8c4f6826ff457b0685e
                                        
                                            GET /s/yantramanav/v11/flUhRqu5zY00QEpyWJYWN59IePNQKBM.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://g2gesso.com.br
Connection: keep-alive
Referer: https://g2gesso.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20888
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 07:03:38 GMT
expires: Fri, 01 Sep 2023 07:03:38 GMT
cache-control: public, max-age=31536000
age: 255917
last-modified: Wed, 27 Apr 2022 15:44:36 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 20888, version 1.0\012- data
Size:   20888
Md5:    da96b6f7330646b7313acb1b80137aba
Sha1:   218894130a018911af360b4ff9bfcc09faa9d70f
Sha256: aebffd4b2e57e4c51a2d007557cb8f59abea10a1aad8967e196e3a29af0c49d5
                                        
                                            GET /wp-content/uploads/2020/01/favicon.png HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 04 Sep 2022 06:08:55 GMT
Server: Apache
Last-Modified: Thu, 16 Jan 2020 17:03:19 GMT
Accept-Ranges: bytes
Content-Length: 42075
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced\012- data
Size:   42075
Md5:    c2b303087324ca48eff297e4f25c4919
Sha1:   f4a96630e402e1a492839e47b94bef319972d273
Sha256: 9c3f717d630c9a7766a23a0778e06ebd80efffcb599c3495962e6e052e64c060
                                        
                                            GET /wp-content/et-cache/notfound/et-divi-dynamic-late.css HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sun, 04 Sep 2022 06:08:55 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 14:27:49 GMT
Accept-Ranges: bytes
Content-Length: 91057
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (28202)
Size:   91057
Md5:    cfb9c3e804a1ebde96b7237266327938
Sha1:   72bb930cd0161d6b3faf1e4dd0b12dff65590290
Sha256: 025578465965c9a949799f61708a558874f71f83c97869ecca74d19cd97d709c
                                        
                                            GET /wp-content/plugins/wordpress-whatsapp-support/assets/fonts/wws-fonts.ttf HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/wp-content/cache/wpo-minify/1662129110/assets/wpo-minify-header-7496449b.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Date: Sun, 04 Sep 2022 06:08:56 GMT
Server: Apache
Last-Modified: Sun, 21 Jun 2020 03:44:10 GMT
Accept-Ranges: bytes
Content-Length: 2804
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, wws-fonts \012- data
Size:   2804
Md5:    6f9070b8779e1f36a1029833421c10b3
Sha1:   a05968e20de19917f356598272ed8e3b48d37cda
Sha256: 71d3429a63b8d94d667bb58bbb3ab2689fd4e68e1bb32af565fe322377b8be06

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/Divi/core/admin/fonts/modules/base/modules.ttf HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/wp-content/cache/wpo-minify/1662129110/assets/wpo-minify-header-7496449b.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Date: Sun, 04 Sep 2022 06:08:56 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 04:59:17 GMT
Accept-Ranges: bytes
Content-Length: 6228
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, ETmodules \012- data
Size:   6228
Md5:    51ae8a67713e8dff77ab0903532caed2
Sha1:   388212f5009137d58ed93aeccfd075cb7e522166
Sha256: 7c51f9fb51890524ad066fb1b4b69d7dc2bd923e182eb4df6d880ea593d2ce4e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2020/01/Logotipo.png HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 04 Sep 2022 06:08:56 GMT
Server: Apache
Last-Modified: Thu, 16 Jan 2020 13:08:35 GMT
Accept-Ranges: bytes
Content-Length: 31872
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 300 x 198, 8-bit/color RGBA, non-interlaced\012- data
Size:   31872
Md5:    172c92f29a15cdd88df87e79374db423
Sha1:   dadaea467e073ad65b0cafccf78a2cf978657c43
Sha256: 6d1b4bc2466f9f1b9a8ec2cd0a1c4de2e33cf89a89ff6c71f65726cf9650c41e
                                        
                                            GET /wp-content/cache/wpo-minify/1662129110/assets/wpo-minify-footer-37403d2a.min.js HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sun, 04 Sep 2022 06:08:53 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 14:43:11 GMT
Accept-Ranges: bytes
Content-Length: 835728
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (45108), with CRLF line terminators
Size:   835728
Md5:    4b554864ce41bd175cdf4823eabbbfff
Sha1:   6f79947c184a68ca7faf522acad68c1379a4fd70
Sha256: 1946d69dd122c136e565095029b0eeab0491a8c0d671b6a3015cc444b2235e1f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/Divi/core/admin/fonts/modules/all/modules.ttf HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/wp-content/cache/wpo-minify/1662129110/assets/wpo-minify-header-7496449b.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: font/ttf
                                        
Date: Sun, 04 Sep 2022 06:08:57 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 04:59:17 GMT
Accept-Ranges: bytes
Content-Length: 92400
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, modules \012- data
Size:   92400
Md5:    de27b3e66b2f8017e000aa9d8d24d60e
Sha1:   e6d716de8f35ba6daf55d57e7fe0ed8d8e50f1f7
Sha256: d201a2c3118a00c82cc48e89815f5139f23956bbe248107dcf522acc77b97c09

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2020/01/contato-icone.png HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 04 Sep 2022 06:08:58 GMT
Server: Apache
Last-Modified: Fri, 17 Jan 2020 12:08:49 GMT
Accept-Ranges: bytes
Content-Length: 4655
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 30 x 30, 8-bit/color RGBA, interlaced\012- data
Size:   4655
Md5:    b42ba2fb4101ac938355df77d8f07f1b
Sha1:   3e87f67395292bb8ecc920feedaca0fe5a66ad81
Sha256: 9051467963278460d74ff4a51b43dc4603bcda6e3fcee343e19444cbafbf4471
                                        
                                            GET /wp-content/uploads/2020/01/Foto-2.jpg HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 04 Sep 2022 06:08:56 GMT
Server: Apache
Last-Modified: Thu, 16 Jan 2020 14:02:16 GMT
Accept-Ranges: bytes
Content-Length: 196772
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5.1 Windows, datetime=2015:11:17 10:46:30], baseline, precision 8, 672x492, components 3\012- data
Size:   196772
Md5:    b5a7a9518eb708618a0ffbcc2a31273d
Sha1:   925aa17ca981dccdc0652ea9524e7964f53b19aa
Sha256: 56e336d8fae988c3daf4b4a1293bd520804b84b31e10578fff36c90f3a325313
                                        
                                            GET /wp-content/uploads/2020/01/Foto-4.jpg HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 04 Sep 2022 06:08:57 GMT
Server: Apache
Last-Modified: Thu, 16 Jan 2020 14:02:20 GMT
Accept-Ranges: bytes
Content-Length: 240927
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5.1 Windows, datetime=2015:11:17 10:46:46], baseline, precision 8, 672x492, components 3\012- data
Size:   240927
Md5:    6df13f29c22f6f3cdcf63d4a89b3d3b6
Sha1:   db92a9053b670c0048c0fef15532f1c6ddc32c0c
Sha256: cbc56ee6145ac1a1c9cd34030881e2b724c65ff32736bc65ac378707149b7ed1
                                        
                                            GET /wp-content/uploads/2020/01/Foto-1.jpg HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 04 Sep 2022 06:08:56 GMT
Server: Apache
Last-Modified: Thu, 16 Jan 2020 14:02:14 GMT
Accept-Ranges: bytes
Content-Length: 227131
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5.1 Windows, datetime=2015:11:17 10:48:34], baseline, precision 8, 672x492, components 3\012- data
Size:   227131
Md5:    05c24c3c90d7565366b56b906d6f71cf
Sha1:   deb0ddd424df696c15e93c950160dbb9ff596de3
Sha256: c14c714ca5d6faa9b2ec1eba133a799942b44c7d3776a20801104c82387874aa
                                        
                                            GET /wp-content/uploads/2020/01/Foto-3.jpg HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 04 Sep 2022 06:08:56 GMT
Server: Apache
Last-Modified: Thu, 16 Jan 2020 14:02:18 GMT
Accept-Ranges: bytes
Content-Length: 288682
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5.1 Windows, datetime=2015:11:17 10:48:59], baseline, precision 8, 672x492, components 3\012- data
Size:   288682
Md5:    66f3d93d7c7adfa552367ca5a0604099
Sha1:   c7e13910918598e9b3251625e38a28b7beaf5360
Sha256: d901159cf192bbabdf7c86644eb7270421ef86e5abb9e9d00f834c9da7288be7
                                        
                                            GET /wp-content/uploads/2020/01/texturaazul.jpg HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 04 Sep 2022 06:08:56 GMT
Server: Apache
Last-Modified: Thu, 16 Jan 2020 13:26:19 GMT
Accept-Ranges: bytes
Content-Length: 285280
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1200, components 3\012- data
Size:   285280
Md5:    b83c0cb9c92063c293b95e23281aef1b
Sha1:   558f64a16c23d61c1669c7aba007af43a3dcd243
Sha256: 04b8ad1ee03d56bcf056c163b7dfe215debd1809941ee16300b3cd1f56629682
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Sun, 04 Sep 2022 04:41:12 GMT
expires: Sun, 04 Sep 2022 06:41:12 GMT
cache-control: public, max-age=7200
age: 5267
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20006
Md5:    56f5d7f608e25d64207135f045f988cb
Sha1:   901eb59372ae330ae85e1384da93479b21ae1082
Sha256: 1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Sun, 04 Sep 2022 06:08:59 GMT
Server: Apache
Last-Modified: Thu, 16 Jan 2020 11:51:08 GMT
Accept-Ranges: bytes
Content-Length: 23090
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel\012- data
Size:   23090
Md5:    1ae9bbcddbbbee52f18c4465822b1627
Sha1:   7171df04afd05dde861ebb6b04f36aa20680e505
Sha256: 8a07543b9c241cc247c4b3caf3c29ba323e12a44103672e88890a8a7152eeb43
                                        
                                            GET /wp-content/uploads/2020/01/Banner01-1.jpg HTTP/1.1 
Host: g2gesso.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.69.46
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 04 Sep 2022 06:08:58 GMT
Server: Apache
Last-Modified: Thu, 16 Jan 2020 13:30:36 GMT
Accept-Ranges: bytes
Content-Length: 283570
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---