Overview

URLrosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
IP 162.214.153.123 (United States)
ASN#46606 UNIFIEDLAYER-AS-1
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-17 08:09:44 UTC
StatusLoading report..
IDS alerts0
Blocklist alert21
urlquery alerts No alerts detected
Tags None

Domain Summary (20)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-09-17 04:50:33 UTC 23.36.77.32
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-17 04:50:29 UTC 143.204.55.35
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-17 04:54:02 UTC 34.117.237.239
code.jquery.com (2) 634 2012-05-21 17:28:02 UTC 2022-09-17 05:06:31 UTC 69.16.175.10
www.instagram.com (1) 1096 2015-08-20 22:44:54 UTC 2022-09-17 04:51:46 UTC 31.13.72.174
www.rosamaster.com.br (2) 0 2015-03-20 19:59:11 UTC 2022-09-16 19:23:52 UTC 162.214.153.123 Unknown ranking
ocsp.digicert.com (3) 86 2012-05-21 07:02:23 UTC 2022-09-17 05:00:07 UTC 93.184.220.29
ocsp.sectigo.com (1) 487 2018-12-17 11:31:55 UTC 2022-09-17 04:53:23 UTC 104.18.32.68
static.getbutton.io (2) 31869 2019-10-01 09:11:58 UTC 2022-09-16 16:26:59 UTC 95.216.228.15
stats.g.doubleclick.net (1) 96 2013-06-02 22:47:44 UTC 2022-09-17 04:18:45 UTC 142.251.1.157
rosamaster.com.br (29) 0 2016-10-08 20:41:27 UTC 2022-09-16 19:23:52 UTC 162.214.153.123 Unknown ranking
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-17 04:53:52 UTC 34.213.140.56
www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-09-17 03:58:43 UTC 142.250.74.72
img-getpocket.cdn.mozilla.net (7) 1631 2017-09-01 03:40:57 UTC 2022-09-17 04:50:44 UTC 34.120.237.76
www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-09-17 05:33:00 UTC 142.250.74.174
firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-09-17 04:50:31 UTC 143.204.55.115
ocsp.pki.goog (6) 175 2017-06-14 07:23:31 UTC 2022-09-17 04:50:28 UTC 142.250.74.3
ajax.googleapis.com (1) 12905 2019-10-15 17:52:08 UTC 2022-09-17 03:59:18 UTC 142.250.74.42
cdnjs.cloudflare.com (2) 235 2020-10-20 10:17:36 UTC 2022-09-17 04:51:31 UTC 104.17.24.14
region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2022-09-17 05:33:00 UTC 216.239.34.36 Domain (google-analytics.com) ranked at: 8401

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/instagram/jquery.inst (...) Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/js/bootstrap.min.js Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/js/jquery-easing/jque (...) Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-includes/css/dist/block-library/style.min.css?v (...) Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/js/scrolling-nav.js Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/img/logo.svg Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/js/jquery/jquery.min.js Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/fonts/gotham/GothamRo (...) Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/fonts/gotham/GothamRo (...) Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/img/ondas.svg Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/img/bgrosasb.svg Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/img/icons/plano.svg Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/img/icons/pin.svg Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/img/icons/star.svg Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/fonts/fontawesome-web (...) Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/img/icons/contato.svg Phishing
2022-09-17 2 rosamaster.com.br/rmsite/wp-content/themes/rosamaster/img/icons/ppd.svg Phishing
2022-09-17 2 www.rosamaster.com.br/wp-content/uploads/2017/12/rosa_ico.ico Phishing
2022-09-17 2 www.rosamaster.com.br/wp-content/uploads/2017/12/rosa_ico.ico Phishing
2022-09-17 2 rosamaster.com.br/wp-content/uploads/2017/12/rosa_ico.ico Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 162.214.153.123
Date UQ / IDS / BL URL IP
2022-09-17 15:04:59 +0000 0 - 0 - 22 rosamaster.com.br/wp-content/themes/rosa2/ban (...) 162.214.153.123
2022-09-17 15:02:04 +0000 0 - 0 - 21 rosamaster.com.br/wp-content/themes/rosa2/ban (...) 162.214.153.123
2022-09-17 15:01:02 +0000 0 - 0 - 22 rosamaster.com.br/wp-content/themes/rosa2/ban (...) 162.214.153.123
2022-09-17 14:55:57 +0000 0 - 0 - 22 rosamaster.com.br/wp-content/themes/rosa2/ban (...) 162.214.153.123
2022-09-17 14:49:01 +0000 0 - 0 - 22 rosamaster.com.br/wp-content/themes/rosa2/ban (...) 162.214.153.123


Last 5 reports on ASN: UNIFIEDLAYER-AS-1
Date UQ / IDS / BL URL IP
2023-03-26 00:20:46 +0000 0 - 0 - 2 barwickconsultingltd.com/lua/erteeetpipSlalna (...) 192.185.36.106
2023-03-26 00:20:11 +0000 0 - 0 - 2 barwickconsultingltd.com/lua/erteeetpipslalna (...) 192.185.36.106
2023-03-26 00:20:08 +0000 0 - 0 - 2 barwickconsultingltd.com/lua/erteeetpipSlalna (...) 192.185.36.106
2023-03-26 00:02:30 +0000 0 - 6 - 0 champlate.com/ 192.185.70.245
2023-03-26 00:02:22 +0000 0 - 0 - 1 textglow.net/packagetrackinginfo.jar 192.254.233.5


Last 5 reports on domain: rosamaster.com.br
Date UQ / IDS / BL URL IP
2023-03-21 15:18:18 +0000 0 - 0 - 1 rosamaster.com.br/wp-content/themes/rosa2/ban (...) 23.236.62.147
2023-03-21 15:17:57 +0000 0 - 0 - 1 rosamaster.com.br/wp-content/themes/rosa2/ban (...) 23.236.62.147
2023-03-21 14:49:58 +0000 0 - 0 - 1 rosamaster.com.br/wp-content/themes/rosa2/ban (...) 23.236.62.147
2023-03-21 14:31:48 +0000 0 - 0 - 1 rosamaster.com.br/wp-content/themes/rosa2/ban (...) 23.236.62.147
2023-03-21 12:27:09 +0000 0 - 0 - 2 www.rosamaster.com.br/wp-content/themes/rosa2 (...) 35.228.150.132


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-09-17 15:04:59 +0000 0 - 0 - 22 rosamaster.com.br/wp-content/themes/rosa2/ban (...) 162.214.153.123
2022-09-17 15:02:04 +0000 0 - 0 - 21 rosamaster.com.br/wp-content/themes/rosa2/ban (...) 162.214.153.123
2022-09-17 15:01:02 +0000 0 - 0 - 22 rosamaster.com.br/wp-content/themes/rosa2/ban (...) 162.214.153.123
2022-09-17 14:55:57 +0000 0 - 0 - 22 rosamaster.com.br/wp-content/themes/rosa2/ban (...) 162.214.153.123
2022-09-17 14:49:01 +0000 0 - 0 - 22 rosamaster.com.br/wp-content/themes/rosa2/ban (...) 162.214.153.123

JavaScript

Executed Scripts (24)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (71)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "17CBB43FD6662576BA3FE8E06CF44247C903C1313CC419053599C41E286A2442"
Last-Modified: Thu, 15 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10598
Expires: Sat, 17 Sep 2022 11:06:10 GMT
Date: Sat, 17 Sep 2022 08:09:32 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 17 Sep 2022 07:11:15 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: i_sZaFsRct82xkcQjSVevxtHMk0g1PPeQxupmeLyjU9exGPOyDVByA==
Age: 3497


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    91dd975a7b17b2922dd23c0e49314e40
Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 17 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DEYZ6E1WWTaM1zr6A38q5XG-W3PD7TojU4x_ks-xnex6J0uKpvE6JQ==
age: 16730
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         162.214.153.123
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sat, 17 Sep 2022 08:09:32 GMT
Server: Apache
Location: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Content-Length: 494
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (336)
Size:   494
Md5:    419e871a849c76275f55f3b28e7bc762
Sha1:   7b34f1585037590ebbee3bd4c701d07d62da88e2
Sha256: b7572392e74838e3256e01633fbaa2e6c3187d878efc1cca860085553e2de377
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 17 Sep 2022 08:09:32 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 17 Sep 2022 08:03:22 GMT
Cache-Control: max-age=3600
Expires: Sat, 17 Sep 2022 08:37:02 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: niKw80eTJXf0GTObnJ6flKwybwDDG5-q1XtItky4jK0e0g_qF-Nnmg==
Age: 371


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5527
Cache-Control: 'max-age=158059'
Date: Sat, 17 Sep 2022 08:09:33 GMT
Last-Modified: Sat, 17 Sep 2022 06:37:26 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YUdHqVmO1qwhYcUP9jYgEw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.213.140.56
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: mLWhvSsK5N4WXk4dQOobk4IjBV8=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /jquery-3.3.1.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rosamaster.com.br
Connection: keep-alive
Referer: https://rosamaster.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         69.16.175.10
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 17 Sep 2022 08:09:34 GMT
content-encoding: gzip
content-length: 30288
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-1538f"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1663402174.dop069.sk1.t,1663402174.cds212.sk1.hn,1663402174.cds072.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30288
Md5:    d549b312f7a7d228b4ec229a6547dfdc
Sha1:   0766794582ad530ec0f8c2595f741086afffa312
Sha256: f6488b2915e0ceee723f4320492511d46c6ba1860d5975d085e6da8913f55f44
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.42
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30306
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 11 Sep 2022 22:01:23 GMT
expires: Mon, 11 Sep 2023 22:01:23 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 468491
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32058)
Size:   30306
Md5:    fc3fc31e5e7c0933dc18e562c1c071bf
Sha1:   a44c31323f6bd29e583cc585036e6eb39f7014a6
Sha256: ddad766fb94b23efeb5574cdedc5e8446d496fb91bd0b08cd80be212e001055d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=UA-148632818-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 17 Sep 2022 08:09:34 GMT
expires: Sat, 17 Sep 2022 08:09:34 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43384
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1720)
Size:   43384
Md5:    a5d26e28216ab536e0b9a2cabc93cf52
Sha1:   b11c6a6feb4cb86273d59430ae9cb1182e8c58ea
Sha256: 9120560d033081f1c2f41c40fdb4665e7feb4c70c426b924c6a0cfffc8edd103
                                        
                                            GET /wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         162.214.153.123
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 17 Sep 2022 08:09:32 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://rosamaster.com.br/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (8047)
Size:   50124
Md5:    8b56feb8248557c56570b9aef5dcada4
Sha1:   3014ae451c4a1c4911d33d4dbceba296810033e9
Sha256: 41975b61105cf3081240363524d3be62eb2ad1b43ffdb9be5ee7a5a3490bc0ce
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /jquery-3.3.1.slim.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rosamaster.com.br
Connection: keep-alive
Referer: https://rosamaster.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         69.16.175.10
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 17 Sep 2022 08:09:34 GMT
content-encoding: gzip
content-length: 24038
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-1111d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1663402174.dop069.sk1.t,1663402174.cds212.sk1.hn,1663402174.cds230.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65247)
Size:   24038
Md5:    0f2e7d37e730fdbb1d8a1e8638529ecb
Sha1:   c21d16978a858baa75be15cb7e799ff000929429
Sha256: cc938c08b93e67c94c68995709f52133c62cac78991f42058503b9c3d9e4b0b0
                                        
                                            GET /ajax/libs/wow/1.1.2/wow.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.24.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 17 Sep 2022 08:09:34 GMT
content-length: 2346
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb04033-1ff6"
last-modified: Mon, 04 May 2020 16:17:55 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2629286
expires: Thu, 07 Sep 2023 08:09:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lI8U9aR6%2Bx6iuBfP8aGeP8GJIhBU1fi7GCnxNHKK%2B1bzg2zyk794WldcFAUcEy2Uq9QB6ApRDfghd%2FJXiQxF2PoBh5BoIt1PHwI46UhfGlpnu863OsLsAkfaH6bvpPIxxbFwpmmq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74c05c44cf660b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (8152)
Size:   2346
Md5:    97c687af34ccd69fdfe48fbca70afec2
Sha1:   ab75720b2143215335378849e4f295a290d4d41f
Sha256: 748b1da138fb49f26c67ae1eaa8908da0b8c9625ad0ece81d704a7fb9a7d07b5
                                        
                                            GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rosamaster.com.br
Connection: keep-alive
Referer: https://rosamaster.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.17.24.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 17 Sep 2022 08:09:34 GMT
content-length: 6646
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-520c"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 209537
expires: Thu, 07 Sep 2023 08:09:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1qcMhE%2FNGUge11nXCPTvncLE%2Fjf4Xbv8TtFknRqoEvrmK3zrDOLk9rIKqfh0AIcSO9I91yutDzp5UaJ%2BuEKaewqbeLGA98WiXpYhwbX9Xjg8sSMxXGFfxD9zmEJErnnGsIuIpdiY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74c05c44c8670b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20831)
Size:   6646
Md5:    368c425fc94c424e1688caadefbed981
Sha1:   13d24c22c199ef6668d758434819f44307a65094
Sha256: ed9c7a83e1c1300a93ecd08807a736ebe7b87ab8262a40bc7e3859d00a46a102
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/css/bootstrap.min.css HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 17 Sep 2022 08:09:33 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:30:03 GMT
Accept-Ranges: bytes
Content-Length: 155758
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65324)
Size:   155758
Md5:    a15c2ac3234aa8f6064ef9c1f7383c37
Sha1:   6e10354828454898fda80f55f3decb347fd9ed21
Sha256: 60b19e5da6a9234ff9220668a5ec1125c157a268513256188ee80f2d2c8d8d36
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/style.css HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 17 Sep 2022 08:09:33 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:33:56 GMT
Accept-Ranges: bytes
Content-Length: 7820
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  assembler source, Unicode text, UTF-8 text
Size:   7820
Md5:    4f72530ec290776074a64672992858c7
Sha1:   891b147b5d78bbc96a6b6c1c037bbd0cda703edd
Sha256: 7cf56caad99d111331fa587a057e7aba61ec42472883445804f96ca1841bdbe8
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/instagram/jquery.instagramFeed.min.js HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 17 Sep 2022 08:09:33 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:31:34 GMT
Accept-Ranges: bytes
Content-Length: 3467
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (3268)
Size:   3467
Md5:    aa8fbc6220b25fcc78f619a2f80fb5df
Sha1:   12dae18ec25f42a149c77ea9e1f05a4070d76d3d
Sha256: 7b2641ee48204e177c627cd8a59057104f50dee0bbb37757148af9eea2c89d1c

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 17 Sep 2022 08:09:33 GMT
Server: Apache
Last-Modified: Wed, 25 May 2022 04:04:52 GMT
Accept-Ranges: bytes
Content-Length: 18617
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   18617
Md5:    32beb68a374e3aeac00abdf9e12b84ea
Sha1:   b5d18aa625e8696dd9d07cd0869337717b211ae0
Sha256: 5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/js/bootstrap.min.js HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 17 Sep 2022 08:09:33 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:31:42 GMT
Accept-Ranges: bytes
Content-Length: 58072
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (57791)
Size:   58072
Md5:    e1d98d47689e00f8ecbc5d9f61bdb42e
Sha1:   6778fed3cf095a318141a31f455c8f4663885bde
Sha256: 0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/css/font-awesome.min.css HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 17 Sep 2022 08:09:33 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:30:04 GMT
Accept-Ranges: bytes
Content-Length: 31000
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837)
Size:   31000
Md5:    269550530cc127b6aa5a35925a7de6ce
Sha1:   512c7d79033e3028a9be61b540cf1a6870c896f8
Sha256: 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/js/jquery-easing/jquery.easing.min.js HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 17 Sep 2022 08:09:33 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:32:00 GMT
Accept-Ranges: bytes
Content-Length: 2532
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (2532), with no line terminators
Size:   2532
Md5:    e2d41e5c8fed838d9014fea53d45ce75
Sha1:   bde98133f735398b27339c423a817e755329f7d1
Sha256: 1f7723b6b9bfced0deba108df48e3287888dd986f1ff2d5133bacc9807ac0349

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15827
Expires: Sat, 17 Sep 2022 12:33:21 GMT
Date: Sat, 17 Sep 2022 08:09:34 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15827
Expires: Sat, 17 Sep 2022 12:33:21 GMT
Date: Sat, 17 Sep 2022 08:09:34 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15827
Expires: Sat, 17 Sep 2022 12:33:21 GMT
Date: Sat, 17 Sep 2022 08:09:34 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15827
Expires: Sat, 17 Sep 2022 12:33:21 GMT
Date: Sat, 17 Sep 2022 08:09:34 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15827
Expires: Sat, 17 Sep 2022 12:33:21 GMT
Date: Sat, 17 Sep 2022 08:09:34 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e43d1ff-79bc-430f-826f-2af5ae602556.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8500
x-amzn-requestid: e1ca6cef-c033-4887-80cf-2014ab8e620c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Ykn5cEnLIAMFrzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6324ed09-3afc16cf66fef0e62dd6f3cc;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 21:39:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BaRpWB_XOMxTJPufnSjd4KSfecRwLe9U5W7uEoXy7pgAa4KSC0n7eg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 22:03:28 GMT
age: 36366
etag: "28ac45ef155c66dd79a306f14d3b38f597b6a32e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8500
Md5:    d46a910081eb782408f1a2fa3c6aabba
Sha1:   28ac45ef155c66dd79a306f14d3b38f597b6a32e
Sha256: d5787a6a12d275555c627e3245b37d4e751148345a09d5671b343cfebe7173b4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77aee3f-a7fb-4d87-92a7-6b33dd4ebf28.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5983
x-amzn-requestid: ba84a9a2-3ebe-4dc9-9604-98d5cccb4f2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YknUqFxpoAMFrpw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6324ec1d-55cd6d0a6e39357c226dd21d;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 21:35:25 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: kWRS1NfiK9etmIoDtGu3C6uf8oqrL3r-mkM6BaTFPyNb6z4lYB38pw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 21:53:58 GMT
age: 36936
etag: "b9c4cd422b818c859ac6ca928bc9e932a578ce30"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5983
Md5:    e1b42bfa9fc6593b0444391dc260329a
Sha1:   b9c4cd422b818c859ac6ca928bc9e932a578ce30
Sha256: 89eee7200bf7a8bf100f64aee2208d7852265a85feb133fc87846b15cd96e842
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcaf888ee-3a5f-426b-9b83-8ea161780db3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5234
x-amzn-requestid: 55e23e9a-f85c-42f2-87b6-aff3646bf1fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yknn_EFzoAMF2Ag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6324ec99-62f023426230c7b46116d4b7;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 21:37:29 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: fb2wN0gTI9OKgDghf1u4DKwrADkYcS5_7LIxaLxmbo0OciwezGh_LA==
via: 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 21:41:22 GMT
etag: "428fe80d3f35758433a6b2cf25e6bcb5f63a6a63"
age: 37692
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5234
Md5:    9c807387d303abb2bca1ef14b14c9e26
Sha1:   428fe80d3f35758433a6b2cf25e6bcb5f63a6a63
Sha256: 277a74204dc8bec8a227ca43cdb840b5dda71f74e8aec56606e862e70a5ba19c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50373a4c-fa87-4ca5-b0b7-67ee2f12abd1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7305
x-amzn-requestid: 15096102-8ffe-47df-bfc7-ff1a1fb9fd1e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YknUqFJmIAMF5Ew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6324ec1d-5c5ca26a24f39af979c17495;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 21:35:25 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5lUx834-NLHpKCxmdiAdNxCXqqNKGcDJlt9wmGR-XxdlroBfwVTrNg==
via: 1.1 e943d5f0cbb0d255d29da0ddf6639ba8.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 21:41:22 GMT
age: 37692
etag: "5ef30af418df5e44a0927361b679b8117c38c473"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7305
Md5:    f108cfb79dd8405677b7406910d11ba5
Sha1:   5ef30af418df5e44a0927361b679b8117c38c473
Sha256: b4b973702c6c98eaf28345b019c8cf022e8056e07f508e17d156c9e136f11936
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37eff517-f8c4-4e04-9fb6-e9a22aa4d8bf.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7788
x-amzn-requestid: c570654d-569c-4faf-9690-5ffab5eaceed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YR5sREScIAMF5RA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d6fe7-3ed179845a3e9ede478e6dfa;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 05:19:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: kkko85Peg1nRJNE9WmrID7GfTrqjOuXZHDAcPRS6ZXIdEQF4YOMBVw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 21:39:39 GMT
age: 37795
etag: "50ae5dbe015dc8b9ad022cb5b11cb2c4c8086368"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7788
Md5:    e0c4155f7b9f8a4a31780ea86e50e398
Sha1:   50ae5dbe015dc8b9ad022cb5b11cb2c4c8086368
Sha256: 598683a93574a8418e19decdbfc5bcae2f028c6e1791c192f98425bd8e339ad4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd5675c7-5120-4f61-bd91-8c4d9af84130.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7788
x-amzn-requestid: 2cb48f87-8b72-4ff7-b041-a6e704b854a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIP2-HFHoAMFssA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6319935f-693e2f2e5a0bcd9f690f21fa;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 07:01:51 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 65YRttsQYzjUMMZXrtAFPdgTPNQuRGnLFliXrcoc24iQgrdBCHolNQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 22:31:11 GMT
age: 34703
etag: "e139a0974317212f094fdbe59e26ca5cf6b9e56d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7788
Md5:    7a22ab7dcdf50f4a297b8e117d336eae
Sha1:   e139a0974317212f094fdbe59e26ca5cf6b9e56d
Sha256: 9b4c23c1bb2e4fcd140ce34bf83f315f09b45202c569cb74113c2e65c4031dcd
                                        
                                            GET /rmsite/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 17 Sep 2022 08:09:33 GMT
Server: Apache
Last-Modified: Wed, 13 Jul 2022 04:05:24 GMT
Accept-Ranges: bytes
Content-Length: 88932
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (43771)
Size:   88932
Md5:    b7915926fe42d76e9c802353ab01dae4
Sha1:   3a8192a4312f25f53de25b100d62829c0f14d67c
Sha256: d7705700d24d5919255576642ad2c28bfc790390b7183a369038ff5c1e814d51

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/js/scrolling-nav.js HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 17 Sep 2022 08:09:33 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:31:45 GMT
Accept-Ranges: bytes
Content-Length: 927
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   927
Md5:    bce7f705b0925028c065ed30222146de
Sha1:   aef98564daac9ae06376ccbbf85db81c9cd41156
Sha256: 196c1eb2d7df10c7a610889a8331c5bcbad9a771f3af79b12a21356f99da3b35

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/parceiros/ajax.js?ver=1.0.0 HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 17 Sep 2022 08:09:33 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:32:03 GMT
Accept-Ranges: bytes
Content-Length: 1434
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1434
Md5:    12524dc47fc0dbbfe0450425a4a038f5
Sha1:   02952020afd8c7de8dd6dcfabac9ad925796aeab
Sha256: 55c189dadc2fc0b5290e4291b22b57f23aa637ca207bdaa18d9102a1e1746c1a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 09:24:00 GMT
Expires: Wed, 21 Sep 2022 09:23:59 GMT
Etag: "0abd6f3dbd3cbbd54532112a1f2cb56a566b1552"
Cache-Control: max-age=349464,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74c05c488a6eb512-OSL

                                        
                                            GET /widget-send-button/js/init.js HTTP/1.1 
Host: static.getbutton.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         95.216.228.15
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx/1.16.0
Date: Sat, 17 Sep 2022 08:09:34 GMT
Content-Length: 145
Connection: keep-alive
Location: https://static.getbutton.io/widget/bundle.js


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   145
Md5:    7938fc116951d02bc261f707297cf915
Sha1:   c7f2a9311468d25830f39a6e280e22cc871149ca
Sha256: a7a0cbe25a887e612a079e22a6b8bee676d68530d19ddf883a19088768f6f464
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/img/logo.svg HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:31:08 GMT
Accept-Ranges: bytes
Content-Length: 15231
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   15231
Md5:    efac79f8f641c07d249660eb2e4fc2c8
Sha1:   9075c8a71cefbb8e4b216b2973b9c8b27ef13e40
Sha256: 8317bdbed389f1054f74d480a9d001e33c9f1be78880c97b463454d583590e77

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /widget/bundle.js HTTP/1.1 
Host: static.getbutton.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rosamaster.com.br/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         95.216.228.15
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.16.0
Date: Sat, 17 Sep 2022 08:09:34 GMT
Last-Modified: Thu, 08 Sep 2022 09:49:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6319baba-4a52c"
Expires: Sat, 17 Sep 2022 11:09:34 GMT
Cache-Control: max-age=10800
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65475)
Size:   94164
Md5:    e71520287bb9126c2b225d2a3b337940
Sha1:   e7cd3e88c04ad3e0e9e089d0e63e657ca2d09665
Sha256: d8aff402695c89c58cbbc7bbd9b7ee5c791da1692646aea46b08d75866629471
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/js/jquery/jquery.min.js HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 17 Sep 2022 08:09:33 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:31:53 GMT
Accept-Ranges: bytes
Content-Length: 86927
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   86927
Md5:    a09e13ee94d51c524b7e2a728c7d4039
Sha1:   0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
Sha256: 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/fonts/gotham/GothamRounded-Bold.woff2 HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://rosamaster.com.br/rmsite/wp-content/themes/rosamaster/style.css
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:30:38 GMT
Accept-Ranges: bytes
Content-Length: 16500
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16500, version 1.0\012- data
Size:   16500
Md5:    cf6af960be2a0419fe1c882a8e7e513f
Sha1:   0dd77eee17f7f5fa3b062b6c7fec4774344b269d
Sha256: 83b2acb152ded330a6817617f8e1bea2cbf7fbccd87ad405dd2934900e553fde

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-content/uploads/2021/09/site-mobile.jpg HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:48:57 GMT
Accept-Ranges: bytes
Content-Length: 237953
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 720x998, components 3\012- data
Size:   237953
Md5:    0293c02e86cebfde27bcce0f617e249d
Sha1:   6cfad40033eb50227420f14286f2b8339e16d065
Sha256: a0cefc373b53aca0737aa8743c7a99cbc010ba72eb71124dfdc8f072a9f43859
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/fonts/gotham/GothamRounded-Medium.woff2 HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://rosamaster.com.br/rmsite/wp-content/themes/rosamaster/style.css
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:30:39 GMT
Accept-Ranges: bytes
Content-Length: 17772
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 17772, version 1.0\012- data
Size:   17772
Md5:    697fd8cd1d6038714e93965f0b797904
Sha1:   a7005f7f6358faaffcdf9ce4e5dee1bc069ef641
Sha256: a6686d9a8da98a81211fa0302d009f9a7cb925dd0e1d0e06874d3a805b717857

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/img/ondas.svg HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/rmsite/wp-content/themes/rosamaster/style.css
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:31:09 GMT
Accept-Ranges: bytes
Content-Length: 505
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   505
Md5:    085518daf31838ef2a1aacfab531c91a
Sha1:   ff4184bce44b2c99894215b70aded44694877c62
Sha256: 5425acdb107fdcaebcbc253043a5872411fab900ca5591486921a058964894dc

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/img/bgrosasb.svg HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/rmsite/wp-content/themes/rosamaster/style.css
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:31:06 GMT
Accept-Ranges: bytes
Content-Length: 15201
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   15201
Md5:    36566e608489cdbe998749953780d6a4
Sha1:   5712650f48944fcd4274398ad298fba52760ccdc
Sha256: e27b0339091517c8b556f55b478ea8ca0080cb018558196acd0bac05380447a8

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/img/icons/plano.svg HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:31:26 GMT
Accept-Ranges: bytes
Content-Length: 1656
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   1656
Md5:    a680eff77f419a42e7318ab8ecc9dcc3
Sha1:   61ae2d4d5d507e118e56a3d422bc317445e0fadb
Sha256: 56a24ca691ca539f54043ac322345d1e77e8752dfbd40417cc8d3923c404c651

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/img/icons/pin.svg HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:31:25 GMT
Accept-Ranges: bytes
Content-Length: 1034
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   1034
Md5:    c67c83e6238bacfada8db52050af2e90
Sha1:   999e78c81cbef4dd466812774d74d67694c2d053
Sha256: 684d98e06f0fa5deed9c99d373caaaaf63f3ae1cc13f709d6d7c87b1ca5ed1ac

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/img/icons/star.svg HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:31:27 GMT
Accept-Ranges: bytes
Content-Length: 2323
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   2323
Md5:    1a4e11831caf15afd5df2efc59fba4c5
Sha1:   df21148200a1efaa66f2712f2085195166b18dfc
Sha256: 2783a36e4e9c48779e618353b7757123e90f1d0c1e89208d42d9d4b96a585682

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://rosamaster.com.br/rmsite/wp-content/themes/rosamaster/css/font-awesome.min.css
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:30:30 GMT
Accept-Ranges: bytes
Content-Length: 77160
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size:   77160
Md5:    af7ae505a9eed503f8b8e6982036873e
Sha1:   d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
Sha256: 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/img/icons/contato.svg HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:31:21 GMT
Accept-Ranges: bytes
Content-Length: 1054
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   1054
Md5:    ce298702ae9b24277414749552fa6667
Sha1:   08df3ce987846725fcf322a7828b450b7e33ea1a
Sha256: e33aafe87b726b96462fcdd64ced087c8f9d7694e102ac63ca4d7c54db657a54

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/img/icons/ppd.svg HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:31:26 GMT
Accept-Ranges: bytes
Content-Length: 3611
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   3611
Md5:    eb8baadd6740e2c20b7c3b414ff33d9e
Sha1:   9cf88c7094272c8dd104d369bab1ec46bacb34a3
Sha256: bde362af2f4ff53daf0a6879a7d68e78112d84073c376340fd94892224efc10a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rmsite/wp-content/themes/rosamaster/img/pin.png HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:31:12 GMT
Accept-Ranges: bytes
Content-Length: 64553
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 500 x 567, 8-bit/color RGBA, non-interlaced\012- data
Size:   64553
Md5:    8f98afe14c1afec0b5fedbb284f0d9cf
Sha1:   c9c5754c3a5baa17d2df9c763377a7adfe5414e8
Sha256: 6d3f7cf46baf99e50569c6a8fc36f88aaf86e85840f09808e93aadc363a91e3a
                                        
                                            GET /rmsite/wp-content/uploads/2021/09/site-desk.jpg HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:48:54 GMT
Accept-Ranges: bytes
Content-Length: 702106
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 1920x720, components 3\012- data
Size:   702106
Md5:    29c53f96e52c151800918c07b79940b2
Sha1:   5acee37e12269be0402eb38489395d358a0bfd54
Sha256: ab92a2a034dd050d89fd9b3bdd766a7828b153b42c3ef7b6eaf76f35ee4245a0
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Sat, 17 Sep 2022 06:41:12 GMT
expires: Sat, 17 Sep 2022 08:41:12 GMT
cache-control: public, max-age=7200
age: 5303
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20006
Md5:    56f5d7f608e25d64207135f045f988cb
Sha1:   901eb59372ae330ae85e1384da93479b21ae1082
Sha256: 1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
                                        
                                            POST /g/collect?v=2&tid=G-G81EW4M1N8&gtm=2oe9e0&_p=735534587&cid=1413140664.1663382078&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663402158&sct=4&seg=0&dl=https%3A%2F%2Frosamaster.com.br%2Fwp-content%2Fthemes%2Frosa2%2Fbancovendedores%2Fhuntington%2Fauth.php%3FJ1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr&dt=Rosa%20Master%20%7C%20P%C3%A1gina%20Inicial&en=page_view&_ss=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rosamaster.com.br
Connection: keep-alive
Referer: https://rosamaster.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://rosamaster.com.br
date: Sat, 17 Sep 2022 08:09:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /rmsite/wp-content/themes/rosamaster/img/cards/cards.png HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rosamaster.com.br/wp-content/themes/rosa2/bancovendedores/huntington/auth.php?J1P1RzozuY31RM3cEOJ9ObMEllTVDkSJBxsFGlTsjwDYpu2Cfd0pmCe6xsdM52YqE3OuTJKv9LB3q30AcM7ycxrWK29K2z39Y5Nr1jmqRs7uiD4bKEaktYe8gxfIJ1WOpKQ7QXV9pogCALnuJeVZKPxIN7Zy90AYSjNuMSOxqD9yCtgkJwjaLkirMgdZgHWabTogDWDr
Cookie: _ga_G81EW4M1N8=GS1.1.1663399359.3.1.1663399366.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         162.214.153.123
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 17 Sep 2022 08:09:34 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 17:31:16 GMT
Accept-Ranges: bytes
Content-Length: 303167
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 500 x 567, 8-bit/color RGBA, non-interlaced\012- data
Size:   303167
Md5:    f4e8f412f83e51253ac0d88aff4c93e4
Sha1:   c77fec8960c57b6df3ddb24aa7fe60b00b3b6a91
Sha256: ce3d3acd630faa5c57611f25ce2b4fcd564c36a07cf931bc0af9da9f951cb4d3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1136
Cache-Control: 'max-age=158059'
Date: Sat, 17 Sep 2022 08:09:35 GMT
Last-Modified: Sat, 17 Sep 2022 07:50:39 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /planorosamaster HTTP/1.1 
Host: www.instagram.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rosamaster.com.br
Connection: keep-alive
Referer: https://rosamaster.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         31.13.72.174
HTTP/2 301 Moved Permanently
content-type: text/html; charset="utf-8"
                                        
location: https://www.instagram.com/planorosamaster/
strict-transport-security: max-age=15552000
x-fb-debug: AX9e9dP4DrORNh29kmEjtCDeg0X8LfLEM3DCwr1+Mmf/QiAFulnNnECuBo6QVt8WNS1jzARB1Htu6YjROZlXVQ==
content-length: 0
date: Sat, 17 Sep 2022 08:09:36 GMT
priority: u=3,i
x-fb-trip-id: 1679558926
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 17 Sep 2022 08:09:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-148632818-1&cid=1413140664.1663382078&jid=1218804550&gjid=958286570&_gid=1444223830.1663382079&_u=QACAAUAAAAAAAC~&z=1083669120 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://rosamaster.com.br
Connection: keep-alive
Referer: https://rosamaster.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.251.1.157
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://rosamaster.com.br
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 17 Sep 2022 08:09:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    c4ca4238a0b923820dcc509a6f75849b
Sha1:   356a192b7913b04c54574d18c28d46e6395428ab
Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1137
Cache-Control: 'max-age=158059'
Date: Sat, 17 Sep 2022 08:09:36 GMT
Last-Modified: Sat, 17 Sep 2022 07:50:39 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 17 Sep 2022 08:09:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2017/12/rosa_ico.ico HTTP/1.1 
Host: www.rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

search
                                         162.214.153.123
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sat, 17 Sep 2022 08:09:35 GMT
Server: Apache
Location: https://www.rosamaster.com.br/wp-content/uploads/2017/12/rosa_ico.ico
Content-Length: 277
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   277
Md5:    edd51acffe37dfca6ff97d70f4898f74
Sha1:   a1528c69a533904fcef2a6588673063bfe5fb1c9
Sha256: 52f60dff7653815af228a0304ebca1eb7419e02f20ebafc48d2df1b03424871f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2017/12/rosa_ico.ico HTTP/1.1 
Host: www.rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga_G81EW4M1N8=GS1.1.1663402158.4.1.1663402158.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079; _gat_gtag_UA_148632818_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         162.214.153.123
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 17 Sep 2022 08:09:35 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Location: https://rosamaster.com.br/wp-content/uploads/2017/12/rosa_ico.ico
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2017/12/rosa_ico.ico HTTP/1.1 
Host: rosamaster.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga_G81EW4M1N8=GS1.1.1663402158.4.1.1663402158.0.0.0; _ga=GA1.3.1413140664.1663382078; _gid=GA1.3.1444223830.1663382079; _gat_gtag_UA_148632818_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         162.214.153.123
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 17 Sep 2022 08:09:36 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://rosamaster.com.br/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (8047)
Size:   50124
Md5:    8b56feb8248557c56570b9aef5dcada4
Sha1:   3014ae451c4a1c4911d33d4dbceba296810033e9
Sha256: 41975b61105cf3081240363524d3be62eb2ad1b43ffdb9be5ee7a5a3490bc0ce

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2223b64d-7436-4cd8-9633-fc79069394d6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9486
x-amzn-requestid: eb3622e4-3ac9-4148-8da1-0eb73e24e798
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YRYP8HkYIAMF4mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d3a65-418ddfed5fe892af4998abc0;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 01:31:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Ny_MBsNOIVhY71rCysMfnx9aAqiywjM1Y0sObUSjYITxCSDxbmnVZA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 21:55:31 GMT
age: 36850
etag: "dfb08910372586148c4e1fbea598818bf65cdbdb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9486
Md5:    2efd7ea9edbfe7d4d2cf6685dc60f571
Sha1:   dfb08910372586148c4e1fbea598818bf65cdbdb
Sha256: a731494ee4cfd1d6d8642dc837f6731d55b84033f0f88a3e45fd82b07d137b28