r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d27590a1d3cbe1e9632b8ae92aaae3f4
202b34e8a0c3b88c8826fd56c6227b34f2cd6f46
6bcfa518476658128c1fb4ea2435c4e58531454cf97138dce7ece9def589aead
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6BCFA518476658128C1FB4EA2435C4E58531454CF97138DCE7ECE9DEF589AEAD"
Last-Modified: Wed, 16 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2428
Expires: Fri, 18 Nov 2022 04:38:53 GMT
Date: Fri, 18 Nov 2022 03:58:25 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash be1be806b5dca7facbb45a6c3db44652
7ae9380a2f3eca959fe6ff6b3832a17cffd12cf4
1f3338058f8e9cae5c9fdd733c74564312726b01c6efdcd628d851d0c99876b0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5021
Cache-Control: max-age=114999
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 03:58:25 GMT
Etag: "63760d7b-1d7"
Expires: Sat, 19 Nov 2022 11:55:04 GMT
Last-Modified: Thu, 17 Nov 2022 10:31:23 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 18 Nov 2022 03:44:59 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 806
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 4e84f361a3c81abc5d665a5f441452a8
7aa4b9cb0a7ba1daa514dbb48fe8e74fdf09b60d
04d64920cc8e6b096841938b0c1140889f5d7a04eabd440934a31f1c7ab90352
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "04D64920CC8E6B096841938B0C1140889F5D7A04EABD440934A31F1C7AB90352"
Last-Modified: Wed, 16 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6058
Expires: Fri, 18 Nov 2022 05:39:23 GMT
Date: Fri, 18 Nov 2022 03:58:25 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: GqNPo2TY9f7YYr2xv0vxsC1G/3rE1FFjeVxUXKAiF+tQYUvBieckz9/dVtZij705STU9mAydvmc=
x-amz-request-id: 5NF7MGXCYJAMZP28
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 18 Nov 2022 03:52:44 GMT
age: 341
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 03:58:25 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
191.6.211.57301 Moved Permanently 306 B URL HTTP/1.1 quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f48ad866a663605d7d27457500edbd5c
6cc97aa7e9d232bb2e9379945a42764d6f00e933
92cd061f469747ff6b8cf0e9756997f749324f5504843c7e32605a8e44dde857
Analyzer Verdict Alert fortinet Phishing
GET /uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php HTTP/1.1
Host: quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 18 Nov 2022 03:58:25 GMT
Server: Apache
Location: https://quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Content-Length: 306
Keep-Alive: timeout=5, max=500
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 18 Nov 2022 03:44:49 GMT
cache-control: public,max-age=3600
age: 816
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash c10055ce87434f700ff8b20e3be1f919
477b3c9f1da0c464282bb54572737e76b6e346da
4d78eb296876122e5ff40fcd7667adf1bf8a4b1ee4c8203c88a63ce8d7910a57
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6202
Cache-Control: max-age=111112
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 03:58:25 GMT
Etag: "6375f9af-1d7"
Expires: Sat, 19 Nov 2022 10:50:17 GMT
Last-Modified: Thu, 17 Nov 2022 09:06:55 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9b892b5bb01efd85539afb42dfa34946
89583fc7c5184d78fd50ab0777d464c0fe6cd93b
f2d4d139c2cabb9f2bb60489159feccb9e945f52c420d7a60ed31758cb972403
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F2D4D139C2CABB9F2BB60489159FECCB9E945F52C420D7A60ED31758CB972403"
Last-Modified: Thu, 17 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21545
Expires: Fri, 18 Nov 2022 09:57:31 GMT
Date: Fri, 18 Nov 2022 03:58:26 GMT
Connection: keep-alive
push.services.mozilla.com/
34.214.236.46101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.214.236.46:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 97kt3eCGY5cLbGS2DEGzlg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9/vhfG8jyPtCxi54DBdnK0uDeic=
quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
191.6.211.57301 Moved Permanently 310 B URL HTTP/2 quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 08f91f7a4ff81d6d71303ac0396424ce
e17df385e2d1f8e92bf933933f4fdec2f75d7451
92e430d9156c17cc44335612ef03fc8d4c32bc5a4500a236befb22b8df35b4a6
Analyzer Verdict Alert fortinet Phishing
GET /uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php HTTP/1.1
Host: quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
location: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
content-length: 310
content-type: text/html; charset=iso-8859-1
date: Fri, 18 Nov 2022 03:58:25 GMT
server: Apache
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.css?v=1.68451615
151.101.85.229200 OK 1.3 kB URL HTTP/2 cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.css?v=1.68451615
IP 151.101.85.229:0
File type ASCII text, with very long lines (1460)
Hash 8786cd8041431d860694eed4e4df5493
ad176b25138137c05527a1a93f9b1d2bd9819bb6
2f1ab64452cbd8b4a75b5f778aaadd7f8a9c194ef48c5e2e9132393b68d21a85
GET /npm/cookieconsent@3/build/cookieconsent.min.css?v=1.68451615 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 3.1.1
x-jsd-version-type: version
etag: W/"135e-3nthfC1sCV/yhiNebPZMMo2hpL8"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 18 Nov 2022 03:58:27 GMT
age: 34424
x-served-by: cache-fra-eddf8230021-FRA, cache-bma1652-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1299
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.js
151.101.85.229200 OK 6.8 kB URL HTTP/2 cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.js
IP 151.101.85.229:0
File type ASCII text, with very long lines (20693), with no line terminators
Hash 58a872ad8da4bad737e618cf78b55feb
1917e7662a1c0d1034c3056c6ebd0e9ae2d542f1
5ddc446ff4623ed98a827c66171c9d5d2809d7f679b0681eb088765e272849bb
GET /npm/cookieconsent@3/build/cookieconsent.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.1.1
x-jsd-version-type: version
etag: W/"50d5-nLraS9YXyGxjjPLr3exyStWWkHs"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 18 Nov 2022 03:58:27 GMT
age: 34394
x-served-by: cache-fra-eddf8230087-FRA, cache-bma1652-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6756
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP 104.18.21.226:0
Hash d4d5ad740a1fc163cbfd5fd22d6a7075
e9fcce935e373373aacd77fd2893ac9ebdf47341
0ba14b0b6af9b536c49e15554c15893e5f3b338aeb4939276a40d19269d87ff7
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 03:58:27 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "AF74A1EFACC5DBA187C012E10DC3F03FA1D320E6"
Expires: Fri, 18 Nov 2022 14:00:00 GMT
Last-Modified: Fri, 18 Nov 2022 02:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1536
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76bdc9ab2ce9b50f-OSL
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 9e20a99f56d244cd43bd10781eb8e1d8
000f6ecfc6a9412d2e062028ee553801f573fd92
17cae43cd454fc69beff944925994d2810f859261cd40bfa58d573163a40b23c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 03:58:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5366
Expires: Fri, 18 Nov 2022 05:27:53 GMT
Date: Fri, 18 Nov 2022 03:58:27 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5366
Expires: Fri, 18 Nov 2022 05:27:53 GMT
Date: Fri, 18 Nov 2022 03:58:27 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5366
Expires: Fri, 18 Nov 2022 05:27:53 GMT
Date: Fri, 18 Nov 2022 03:58:27 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash feaeba711c7421b074e726f89ff34e0b
c590c0b76a7a78ab51a4dabcd8f20a1b172b02fb
ebe6e312ea7116713547fbd756805843b1c242ad22269158a79305f1819fa990
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 03:58:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57ba71d8-c0f3-4d43-a49a-3576bdcfb322.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57ba71d8-c0f3-4d43-a49a-3576bdcfb322.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 292dc2edef978e128f70b96ee4b2b3e2
1530f860e2b54b7b382f59654db63eaed59c5f95
f74b08f1bdd35ea7ebb6e2887fc6c02abc76f9e276cd30d1d7d6475e667b5624
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57ba71d8-c0f3-4d43-a49a-3576bdcfb322.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4310
x-amzn-requestid: 6452483a-f96e-4f27-a18e-55e9206e7be6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-78FiToAMFQag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab7f-4e366d3612f39c5c421e864e;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:45:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0biXrpW2TGcLKgAOqLdsgFkZ5lKewM0VFGeNTTrmHX7QEcuNzuwnvQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:14:32 GMT
age: 20635
etag: "1530f860e2b54b7b382f59654db63eaed59c5f95"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 032386e5c9dffff1ba1ee5e8a322d438
dd4fd6c803a9b333bace9a541c6bd183d0c56bb9
0e9f559a0aa7e114c5810a27ba243c0da7b44dc0bf7aec2b7ab32b8f0e2b536c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: ae092a0a-1709-4497-9f07-0348a28d2491
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqZOIEN7oAMFlaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637408c0-5ac595df302a8f1d3703ad8d;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:46:40 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: c_SJMaV3uYSUysTSOFV--jQqDUxw-fBp8cXWWUZw9vUjt0d6PsOpxA==
via: 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 18:45:44 GMT
age: 33163
etag: "dd4fd6c803a9b333bace9a541c6bd183d0c56bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3a5d24e-84d5-4c9f-9fda-c8fafaeef64c.jpeg
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3a5d24e-84d5-4c9f-9fda-c8fafaeef64c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6c07ca17dc4187cb964dcf51c7d4c803
3ab61331361e2755fa8339ac3131eceff4f535c1
5f9262f80a49bf673803568d17a290277d1235efbe7462fea0e6f0d5c1edaf5a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3a5d24e-84d5-4c9f-9fda-c8fafaeef64c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9345
x-amzn-requestid: 986b938b-2dfa-4777-80c6-819a29b65e3d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw_FsFSsoAMFmEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376abbd-5dc3705f3a14a60d7bd11c35;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:46:37 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: u40g9pH7-OUaPF52MPmWuColzfcBybhSdCFY_YxQLnvfW0GzqMd50Q==
via: 1.1 332ef4544bd8b531e8f11abaa4197c08.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:52:40 GMT
age: 21947
etag: "3ab61331361e2755fa8339ac3131eceff4f535c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44ba3263-9329-4559-836c-276171e025ed.jpeg
34.120.237.76200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44ba3263-9329-4559-836c-276171e025ed.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 86031fc92c8180ae6e705b264f22a3db
218a3019acb40a251de89c66b42cba265f4554e8
b3f4c1825d35cae0c3a5f4de5ea26a9175a4ae03b16738e909353365acd3a73b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44ba3263-9329-4559-836c-276171e025ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6637
x-amzn-requestid: b821413a-b325-40bb-9b89-30707f71e661
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-7vETlIAMFTMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab7e-1f1856e545d5c6521385a4de;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:45:34 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: xe8OcDgFv6akQwAdoXVtB6Dp288li05jmMJlshlERoQeENkABsmDRQ==
via: 1.1 b04d82bf2bc15ab146955a862be263f0.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:52:40 GMT
age: 21947
etag: "218a3019acb40a251de89c66b42cba265f4554e8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d44c091-52da-4eae-8a5b-f376d6b63e56.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d44c091-52da-4eae-8a5b-f376d6b63e56.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ce1e042758fce03f4a8397f95b1ce5db
5f17669b66ddc31ab9e0f34a67c4fec78fc481d1
ff5dba7f1d84eccd80258c32d63c7898c675bda09de0d15b00c7d99c3878c8fc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d44c091-52da-4eae-8a5b-f376d6b63e56.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7231
x-amzn-requestid: eeaebeae-e22f-4a56-9dcf-c358ca2f4417
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw9VlEHDoAMFVZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376a8f0-7d3531e827495676679b1c83;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:34:40 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: pzqmjsJGnpPXoGyqNH92ncZunc-iuH9U62BlQWJZhig5rw5RBjgQvw==
via: 1.1 3c974a460e97e56c6eb1e6a30797d9d6.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:55:50 GMT
age: 21757
etag: "5f17669b66ddc31ab9e0f34a67c4fec78fc481d1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05289172c1455c4134e496c6f4606efd
ce1bb33256b0754f9acc01e7e9f3e5dc85f89244
a8b4411a0310cc376efe2aec7c0830b8d3b63b8827631b0ff43ec092f1f80f82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12065
x-amzn-requestid: 45c97153-71c7-4985-a1ad-fc21a509d153
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-K5FyVIAMFtDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa45-0f9d22dd544a4580570f3089;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dxT2WJB7m5tUhgBn2PwTIN4Zskzm3X7CW-29hl1nCyNPbKt5j6q5iA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:55:27 GMT
age: 21780
etag: "ce1bb33256b0754f9acc01e7e9f3e5dc85f89244"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/bootstrap-submenu.css?v=1.68451615
191.6.211.57200 OK 6.5 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/bootstrap-submenu.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 31b5a95190836a9fceb965df09947b63
a66c33112d5441f2354efc7e734e91a50b0b47c8
2e4bd24586817b90acdaa9b88af5311bf2c4e314a0d9fc1c1c3d738e1e51fa10
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/bootstrap-submenu.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "1947-5e4f74c521cb5"
accept-ranges: bytes
content-length: 6471
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:26 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/bootstrap-select.min.css?v=1.68451615
191.6.211.57200 OK 6.7 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/bootstrap-select.min.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (6433)
Hash 902c7678a616b665addf9db32dd0a450
3a55108519bd48fe572767f24b5bdb72305fd98b
043bb6a2c76a8d86c8f44486e792cb94743cb7fb758eb7af5162082a432b81c1
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/bootstrap-select.min.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:31 GMT
etag: "19fa-5e4f74c505f65"
accept-ranges: bytes
content-length: 6650
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:26 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/fonts/flaticon/font/flaticon.css?v=1.68451615
191.6.211.57200 OK 2.5 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/fonts/flaticon/font/flaticon.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash a0240335bac7c1a06024356194a2397f
e71dec7655ffece83dee3ede6a3c96e1c194182f
f0cab9678721462f413ee70761632979f6887e5db2b3ad1fd5887f2fb4e6bfef
GET /assets/fonts/flaticon/font/flaticon.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:50 GMT
etag: "9a8-5e4f74d662c95"
accept-ranges: bytes
content-length: 2472
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:26 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/fonts/font-awesome/css/font-awesome.min.css?v=1.68451615
191.6.211.57200 OK 31 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/fonts/font-awesome/css/font-awesome.min.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (30819)
Hash 4921ec3a59f0521419db0bb832066fe0
d97430435f4473ec207fba2f36f67742da4e94ce
a8bd8b57e92a4ddb091c315b0b365a72fedd552cabef88b6a38f9ab4f26c138b
Analyzer Verdict Alert fortinet Phishing
GET /assets/fonts/font-awesome/css/font-awesome.min.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:51 GMT
etag: "7906-5e4f74d760345"
accept-ranges: bytes
content-length: 30982
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:26 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/animate.min.css?v=1.68451615
191.6.211.57200 OK 76 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/animate.min.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (460)
Hash d11ac1f04a7baaae9b5af32f76027d3f
3c570a47535c09e8b756612c2c385e5b9bb4fe00
ce17005c1639af7af95cde7a7683b2ecfee7192f2899106e7209f0a37bd73042
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/animate.min.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "12a55-5e4f74c51a39d"
accept-ranges: bytes
content-length: 76373
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:26 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/util.css?v=1.68451615
191.6.211.57200 OK 889 B URL HTTP/2 www.quintaoimoveis.com.br/assets/css/util.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash e154655b1313567592b1e2932dfd8341
98b50d91fa6ea0f8a269f172875821f434ad6a2e
53e435f7b895d3f04468a3b1e5c2e670b432a0a77736dc3d0cf3d58cad06dcaa
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/util.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "379-5e4f74c5f4bb5"
accept-ranges: bytes
content-length: 889
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/ie10-viewport-bug-workaround.css?v=1.68451615
191.6.211.57200 OK 518 B URL HTTP/2 www.quintaoimoveis.com.br/assets/css/ie10-viewport-bug-workaround.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 95c9d9598d5be1cf69a6341649eca4e2
71d4d986ffcdbfab7ef154c95993e54c28def77a
9485950ff928c4d006f35a8fe43e7c0ebdc7bc3e6dfb28d1334507fbd0b318d7
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/ie10-viewport-bug-workaround.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "206-5e4f74c56953d"
accept-ranges: bytes
content-length: 518
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/ie-emulation-modes-warning.js?v=1.68451615
191.6.211.57200 OK 2.2 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/ie-emulation-modes-warning.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash ca9f93eaf66619997f4c9e773e0e1e02
4d777efd46a68823ddf48b109c60080403b6d52b
159962d64c5d4c0276db83fe61cea114823a30a4ae01d5f66ad8e6af44f6ca1e
GET /assets/js/ie-emulation-modes-warning.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "8c7-5e4f74cd03dc5"
accept-ranges: bytes
content-length: 2247
cache-control: max-age=1800
content-type: application/javascript
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/ie10-viewport-bug-workaround.js?v=1.68451615
191.6.211.57200 OK 682 B URL HTTP/2 www.quintaoimoveis.com.br/assets/js/ie10-viewport-bug-workaround.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash e00b941fbb45e15c1fca528cdcce2444
f520b96b591f9aeffcd645cc9f803c9580cdb5ca
4ab77001090794c2f79060ada48f7ef5682a3c727dd31be876b59635e5b0fbe1
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/ie10-viewport-bug-workaround.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "2aa-5e4f74cd0ab25"
accept-ranges: bytes
content-length: 682
cache-control: max-age=1800
content-type: application/javascript
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/base_url/base_url.js?v=1.68451615
191.6.211.57200 OK 53 B URL HTTP/2 www.quintaoimoveis.com.br/assets/js/base_url/base_url.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 07d8e15637c9e3204c314a239dbd2129
2ef4b1006f248ac12ee6e5b3aad8523fc7c7de50
9074ab2a1e9e1677d6750a53d4b5919f1f7a449613752a65c744c1fc84c4d6f6
GET /assets/js/base_url/base_url.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Sep 2022 17:39:35 GMT
etag: "35-5e82de9b1e9f7"
accept-ranges: bytes
content-length: 53
cache-control: max-age=1800
content-type: application/javascript
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery.scrollUp.js?v=1.68451615
191.6.211.57200 OK 2.4 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery.scrollUp.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (2437), with no line terminators
Hash a8f0a63d79286168ca27252e4b5e25a6
817a703bd3e0d6c4f054d269ccb8642dd0c3140e
9c91de469811a71271b366f9e326fee8769c33053cd3e378cd8c72780e01f214
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery.scrollUp.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:41 GMT
etag: "985-5e4f74cdbfd95"
accept-ranges: bytes
content-length: 2437
cache-control: max-age=1800
content-type: application/javascript
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/magnific-popup.css?v=1.68451615
191.6.211.57200 OK 7.5 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/magnific-popup.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 8ff5387a95b3124e20d64ae8acc62b20
406ef5543359083d41c984387138550d6a855331
23f703d87caf866aae9e0bcef6f7efec2f5de57476c99e2adbcf32c38fc12844
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/magnific-popup.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "1d6c-5e4f74c5a1b95"
accept-ranges: bytes
content-length: 7532
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/correcao.css?v=1.68451615
191.6.211.57200 OK 7.2 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/correcao.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash ade5dd3c057e148671941b338f7dfdd1
27cac69172ffa185ad5b018815dd9dfc0c49ee9a
ac9ae705f7c98c43955ffca7c7f11bf48b18cada8f81b088916912978b5c839a
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/correcao.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 27 Sep 2022 12:03:57 GMT
etag: "1c02-5e9a77057c5ad"
accept-ranges: bytes
content-length: 7170
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/bootstrap-submenu.js?v=1.68451615
191.6.211.57200 OK 2.8 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/bootstrap-submenu.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (2610)
Hash 32d85e0f496241e5de6eb2e040883b84
0d481a4fe582ebb6e97166e68b567565ba61a7f9
9a39e0cba88dc9b0089d9717167bce3bfc401e702968bd5a0ac453cf21e45257
GET /assets/js/bootstrap-submenu.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:39 GMT
etag: "ae4-5e4f74ccb09bd"
accept-ranges: bytes
content-length: 2788
cache-control: max-age=1800
content-type: application/javascript
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/fonts/linearicons/style.css?v=1.68451615
191.6.211.57200 OK 8.3 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/fonts/linearicons/style.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash aa4cd95fc370b1cc4247fec9e0f946eb
890ddf42c64e544ed82e55c325de8f6d9dcf70e4
f5c203b6416a054de195921e85165e4d66fd303ea8d20982a190fede7b673576
Analyzer Verdict Alert fortinet Phishing
GET /assets/fonts/linearicons/style.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:43 GMT
etag: "2098-5e4f74d043a5d"
accept-ranges: bytes
content-length: 8344
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/leaflet.css?v=1.68451615
191.6.211.57200 OK 10 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/leaflet.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash dd02f3af507ad0c157ee728b60563227
b5c1ffbf24d25c2631d07382eab595a499d13a51
054c8428a61c92550ff6eec8a07a5d06a4b550d6e72c09d73fec7eadbdda0b19
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/leaflet.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "2776-5e4f74c585675"
accept-ranges: bytes
content-length: 10102
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/dropzone.css?v=1.68451615
191.6.211.57200 OK 12 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/dropzone.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 8b6c7282340f2f62e4acb5d5827779ba
cbe0c8d5295a90fe1e7bd7c374f7bd47a999d5d1
aff1f8176ca63fefded4df9f6b550a8051d1001d61b051e64f7ba18019a6d198
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/dropzone.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "2d16-5e4f74c55aec5"
accept-ranges: bytes
content-length: 11542
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/map.css
191.6.211.57200 OK 16 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/map.css
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash d1d1723f92584b38a404df1097b07862
296864f26e1988b795d8133cde646fde8df76d53
f479285a67c398bcc26da9910ee8a5497dc808ff1fb6ff434e223cfcdac68157
GET /assets/css/map.css HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "3f49-5e4f74c5a8cdd"
accept-ranges: bytes
content-length: 16201
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/skins/default.css?v=1.68451615
191.6.211.57200 OK 16 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/skins/default.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 2fa7531b7aa1b830821d89d6d9092f76
8b0d803bafe43629037837b549a9b17e6d894a66
3a57fb281d0ca108530d7647c851659c6650412ea1d07d5f1f757e83ba4b7ca7
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/skins/default.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:23:41 GMT
etag: "3f4b-5e4f76d0dd3bd"
accept-ranges: bytes
content-length: 16203
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/wow.min.js?v=1.68451615
191.6.211.57200 OK 8.4 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/wow.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (8386)
Hash 43df281b12fea21afa7533000b77b9da
bbb906a10283f31213d85aa95e11a489c9c27b4e
6bc4d4442fe40defc9579e89683d9c4bd0c9bc6b5870c8692407028b98e16233
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/wow.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:41 GMT
etag: "20e0-5e4f74ce4fa5d"
accept-ranges: bytes
content-length: 8416
cache-control: max-age=1800
content-type: application/javascript
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/bootstrap.min.css?v=1.68451615
191.6.211.57200 OK 121 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/bootstrap.min.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (65371)
Size 121 kB (121260 bytes)
Hash 2f624089c65f12185e79925bc5a7fc42
8eb176c70b9cfa6871b76d6dc98fb526e7e9b3de
eece6e0c65b7007ab0eb1b4998d36dafe381449525824349128efc3f86f4c91c
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/bootstrap.min.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "1d9ac-5e4f74c54cc35"
accept-ranges: bytes
content-length: 121260
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:26 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/jquery.mCustomScrollbar.css?v=1.68451615
191.6.211.57200 OK 53 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/jquery.mCustomScrollbar.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 41605be1cba276caf15a9a84b0d2719e
a0867811f1ec9b61f55ecfc13143c416322e9a99
ab95d95996d636db32d0daf3c8ad927d7659e1fb3e01cd56a69ce01d28a976f1
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/jquery.mCustomScrollbar.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:32 GMT
etag: "cf91-5e4f74c585675"
accept-ranges: bytes
content-length: 53137
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/app.js?v=1.68451615
191.6.211.57200 OK 10 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/app.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 2965018e8ae0fcc667de6c80d53e65ea
13b507d80df05919d38d837fa9ade7b94b6a8a95
aabe5b6d2828ccd8ad3d3f68c5454dd77d264c42137f3303152e67e791e9528e
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/app.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:39 GMT
etag: "28d0-5e4f74cc96bad"
accept-ranges: bytes
content-length: 10448
cache-control: max-age=1800
content-type: application/javascript
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery.magnific-popup.min.js?v=1.68451615
191.6.211.57200 OK 20 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery.magnific-popup.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (20087)
Hash 2ff3269846e36a0bdb0c5ca8877f4b80
d87cd0d6e37b3bf5d57498c11cdc222e40fe5c65
d199b3eae4ec01cfe0be1e9c5ec06391ea646b47aba35b591e6cdf67bb8cd284
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery.magnific-popup.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "4f4b-5e4f74cd736ed"
accept-ranges: bytes
content-length: 20299
cache-control: max-age=1800
content-type: application/javascript
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/img/logos/footer-logo.png
191.6.211.57200 OK 44 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/img/logos/footer-logo.png
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type PNG image data, 450 x 209, 8-bit/color RGBA, non-interlaced\012- data
Hash 3894f71f44ea66958d7797e4ac28ba50
a778630ab3e77df4d01ff3670b173a970845e47a
ff7f50833a406b3be1de0dc1646b18c4137479367153ebbfffcc7dc1a1af814f
GET /assets/img/logos/footer-logo.png HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:28:47 GMT
etag: "ad11-5e4f77f548da5"
accept-ranges: bytes
content-length: 44305
cache-control: max-age=1800
content-type: image/png
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/img/logos/logo.png
191.6.211.57200 OK 44 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/img/logos/logo.png
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type PNG image data, 450 x 209, 8-bit/color RGBA, non-interlaced\012- data
Hash 3894f71f44ea66958d7797e4ac28ba50
a778630ab3e77df4d01ff3670b173a970845e47a
ff7f50833a406b3be1de0dc1646b18c4137479367153ebbfffcc7dc1a1af814f
GET /assets/img/logos/logo.png HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:23:19 GMT
etag: "ad11-5e4f76bbc5935"
accept-ranges: bytes
content-length: 44305
cache-control: max-age=1800
content-type: image/png
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery.mask.js?v=1.68451615
191.6.211.57200 OK 23 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery.mask.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash e86166037cdacd2e8b8c4428077d6cb8
79028d2e5e6334eaaabb7f363d2aaa016988f64c
3edcd35f57ed9849a3f18522017d304c843e75d4c0195b763222ccb06b003313
GET /assets/js/jquery.mask.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "5a58-5e4f74cd907c5"
accept-ranges: bytes
content-length: 23128
cache-control: max-age=1800
content-type: application/javascript
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/bootstrap.min.js?v=1.68451615
191.6.211.57200 OK 37 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/bootstrap.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (32003)
Hash c5b5b2fa19bd66ff23211d9f844e0131
791aa054a026bddc0de92bad6cf7a1c6e73713d5
2979f9a6e32fc42c3e7406339ee9fe76b31d1b52059776a02b4a7fa6a4fd280a
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/bootstrap.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "9004-5e4f74ccd53ad"
accept-ranges: bytes
content-length: 36868
cache-control: max-age=1800
content-type: application/javascript
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 759d55a9f00851e8653847413a8a3db5
2424e3d7aae0972c57bee3a60a50b3b8a82bba23
5d07bc72f8be0bc42f91b8cb202f4cdc83fb4e5f5f360998066dad08a7fef6ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 03:58:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 71821131fa0825a241bb6f95ad63a26a
4c676dbf861c2fca225bd1b9620237246ddfc724
f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 03:58:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
216.58.207.195200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.quintaoimoveis.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 05:42:51 GMT
expires: Fri, 17 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 80137
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 71821131fa0825a241bb6f95ad63a26a
4c676dbf861c2fca225bd1b9620237246ddfc724
f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 03:58:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 759d55a9f00851e8653847413a8a3db5
2424e3d7aae0972c57bee3a60a50b3b8a82bba23
5d07bc72f8be0bc42f91b8cb202f4cdc83fb4e5f5f360998066dad08a7fef6ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 03:58:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.quintaoimoveis.com.br/assets/js/bootstrap-select.min.js?v=1.68451615
191.6.211.57200 OK 34 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/bootstrap-select.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (32019)
Hash e79ba51275bd09154cd3d4e155444c2b
4455ee98d9c7d861a373842e3f8a265f35ca4a9f
2d7c202c80ee4edf9c89abb2c1b3759ed2ba0bf0061d8642b8ef894fb421ad97
GET /assets/js/bootstrap-select.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "84ae-5e4f74ccbfbed"
accept-ranges: bytes
content-length: 33966
cache-control: max-age=1800
content-type: application/javascript
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery.mCustomScrollbar.concat.min.js?v=1.68451615
191.6.211.57200 OK 46 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery.mCustomScrollbar.concat.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (32001)
Hash 59af70cc2559b47db8864e69e016d30d
3962c007c80d2c23508de4cfe8a23529f1a5c498
44a0a9aa817e76bc2ac4f824f298418dda834783fe0ea0e721b97aaf82cd42be
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery.mCustomScrollbar.concat.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:41 GMT
etag: "b1ab-5e4f74cdb70f5"
accept-ranges: bytes
content-length: 45483
cache-control: max-age=1800
content-type: application/javascript
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery-2.2.0.min.js?v=1.68451615
191.6.211.57200 OK 86 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery-2.2.0.min.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type ASCII text, with very long lines (32069)
Hash 93c4b563622d278b1065690a3d93709e
f00d128cf399f17322b1d4ee02fa8cd892e081bd
601c06474a16936670a0477da2a777ccfca3301e3857204ec9b55dfa2c45287e
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery-2.2.0.min.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "14e54-5e4f74cd3471d"
accept-ranges: bytes
content-length: 85588
cache-control: max-age=1800
content-type: application/javascript
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/jquery.mb.YTPlayer.js?v=1.68451615
191.6.211.57200 OK 103 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/js/jquery.mb.YTPlayer.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Size 103 kB (103147 bytes)
Hash ade725c997b8d6b1601059b5a83e83fc
134b15018533ae7ed8042619a00c2e8b7f9d2bbc
fee38b0502add6d349427a0f6f2dfc581292a39b5e1d3dc244c100089cc99fb1
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery.mb.YTPlayer.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "192eb-5e4f74cda4bfd"
accept-ranges: bytes
content-length: 103147
cache-control: max-age=1800
content-type: application/javascript
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/lib/slick-1.8.1/slick/slick.css?v=1.68451615
191.6.211.57200 OK 2.1 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/lib/slick-1.8.1/slick/slick.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 1856c916f957fb90b684749a98a1705a
f217b9ee12b3e744fa9ff7dd661927de1eba8232
0d86ed0aebe5aa5af7069a67735fc47578b9c926406e1c7baced692bc4c0a651
Analyzer Verdict Alert fortinet Phishing
GET /assets/lib/slick-1.8.1/slick/slick.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:57 GMT
etag: "848-5e4f74dd93d9d"
accept-ranges: bytes
content-length: 2120
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:28 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/lib/slick-1.8.1/slick/slick-theme.css?v=1.68451615
191.6.211.57200 OK 3.1 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/lib/slick-1.8.1/slick/slick-theme.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash a4b02d957b44571b307c0ddb206e0c94
23acd31d6664488fadc30868c477816f55ae0ad4
8a311dee53722942df8ec4a6cdaba5e9e71e44f23d8cde49f09f59df2eeb7dd6
Analyzer Verdict Alert fortinet Phishing
GET /assets/lib/slick-1.8.1/slick/slick-theme.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:57 GMT
etag: "c49-5e4f74dd7804d"
accept-ranges: bytes
content-length: 3145
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:28 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/img/loader.gif
191.6.211.57200 OK 27 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/img/loader.gif
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type GIF image data, version 89a, 38 x 38\012- data
Hash 8c29ba58bf7e5289fed70efcb011b398
44d4f1e26aee06150e27727dd31709415846e942
64a4a69d295326682b71712b0039edb407a2c810fa4d9695b4ef93b7862e4c04
GET /assets/img/loader.gif HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/assets/css/style.css?v=1.68451615
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:37 GMT
etag: "699b-5e4f74c9ff665"
accept-ranges: bytes
content-length: 27035
cache-control: max-age=1800
content-type: image/gif
date: Fri, 18 Nov 2022 03:58:28 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
191.6.211.57200 OK 77 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/assets/fonts/font-awesome/css/font-awesome.min.css?v=1.68451615
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:52 GMT
etag: "12d68-5e4f74d84ef95"
accept-ranges: bytes
content-length: 77160
date: Fri, 18 Nov 2022 03:58:28 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/img/favicon.ico
191.6.211.57200 OK 3.7 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/img/favicon.ico
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
File type PNG image data, 60 x 36, 8-bit/color RGBA, non-interlaced\012- data
Hash 59ca4dd6141956e8dd4c8c5fd71b3632
d0bfddd4cb482ad28f3bbe21b86a6ca0de3da5d2
cc2807c577cdada87f6beaf480daf58712df7c3654f626dc6dddc40b1cf3b532
GET /assets/img/favicon.ico HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Sep 2022 18:26:37 GMT
etag: "e51-5e82e91ede92a"
accept-ranges: bytes
content-length: 3665
cache-control: max-age=1800
content-type: image/x-icon
date: Fri, 18 Nov 2022 03:58:28 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/skins/default.css
191.6.211.57200 OK 16 kB URL HTTP/2 www.quintaoimoveis.com.br/assets/css/skins/default.css
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Hash 2fa7531b7aa1b830821d89d6d9092f76
8b0d803bafe43629037837b549a9b17e6d894a66
3a57fb281d0ca108530d7647c851659c6650412ea1d07d5f1f757e83ba4b7ca7
GET /assets/css/skins/default.css HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:23:41 GMT
etag: "3f4b-5e4f76d0dd3bd"
accept-ranges: bytes
content-length: 16203
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:28 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
191.6.211.57200 OK 0 B URL HTTP/2 www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Analyzer Verdict Alert fortinet Phishing
GET /uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
vary: Accept-Encoding
set-cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1; path=/
content-type: text/html; charset=UTF-8
date: Fri, 18 Nov 2022 03:58:26 GMT
server: Apache
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/js/dropzone.js?v=1.68451615
191.6.211.57200 OK 0 B URL HTTP/2 www.quintaoimoveis.com.br/assets/js/dropzone.js?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
GET /assets/js/dropzone.js?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:14:40 GMT
etag: "12bb5-5e4f74cce9bcd"
accept-ranges: bytes
content-length: 76725
cache-control: max-age=1800
content-type: application/javascript
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,300,600,700,800%7CPlayfair+Display:400,700%7CRoboto:100,300,400,400i,500,700
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,300,600,700,800%7CPlayfair+Display:400,700%7CRoboto:100,300,400,400i,500,700
IP 142.250.74.10:0
GET /css?family=Open+Sans:400,300,600,700,800%7CPlayfair+Display:400,700%7CRoboto:100,300,400,400i,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 18 Nov 2022 03:58:27 GMT
date: Fri, 18 Nov 2022 03:58:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.quintaoimoveis.com.br/assets/css/style.css?v=1.68451615
191.6.211.57200 OK 0 B URL HTTP/2 www.quintaoimoveis.com.br/assets/css/style.css?v=1.68451615
IP 191.6.211.57:0
ASN #28299 IPV6 Internet Ltda
Analyzer Verdict Alert fortinet Phishing
GET /assets/css/style.css?v=1.68451615 HTTP/1.1
Host: www.quintaoimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.quintaoimoveis.com.br/uploads/disk/wet/tiop/88788a755d725e28c305c819e860defd/Up-dating.php
Cookie: PHPSESSID=bc45098383e87aa299a863b40a2942c1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 20:26:50 GMT
etag: "20d35-5e4f77850559d"
accept-ranges: bytes
content-length: 134453
cache-control: max-age=1800
content-type: text/css
date: Fri, 18 Nov 2022 03:58:27 GMT
server: Apache
X-Firefox-Spdy: h2