r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10200
Expires: Wed, 30 Nov 2022 18:29:12 GMT
Date: Wed, 30 Nov 2022 15:39:12 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash f3cf023c797da81728c0ac84c8759331
fa07c5e39e4b0741ea484101cccb2202acea9d9c
5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1093
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:12 GMT
Last-Modified: Wed, 30 Nov 2022 15:20:59 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
centroclinicoacras.com.br/
301 Moved Permanently 246 B URL HTTP/1.1 centroclinicoacras.com.br/
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a418f1dfc733e964a020f35ed9e63807
7098cb557de2bf6473f0da038bbcaaac96a11f4e
7d2576fcd28850c4a6733df8cac5e5977554273b08bf6248cdd4fce614235181
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET / HTTP/1.1
Host: centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 30 Nov 2022 15:39:12 GMT
Server: Apache
Location: https://www.centroclinicoacras.com.br/
Content-Length: 246
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8602
Expires: Wed, 30 Nov 2022 18:02:34 GMT
Date: Wed, 30 Nov 2022 15:39:12 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 15:19:41 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1171
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8QZwJhRhJRKq/njk9ljuHgbO4Td4nb1aVRfe8YTqKm/i9HNro8NmlB3AH+KEVVibagJ4/FdyZZA=
x-amz-request-id: F5RTCB8QBPJXBRPV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 14:45:16 GMT
age: 3236
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:39:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 15:08:56 GMT
cache-control: public,max-age=3600
age: 1817
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cfdd00e67ee6ca21712b867eb5288ab6
b61d5d6ec3b7ad71619e13e32c87f2d01871b88a
f740cac6dfedc1bf0f82efb10dac4f6ffb22f9bb5d4a9b68a4cd971dd2f65793
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1091
Cache-Control: max-age=150349
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:13 GMT
Etag: "63871d2b-1d7"
Expires: Fri, 02 Dec 2022 09:25:02 GMT
Last-Modified: Wed, 30 Nov 2022 09:06:51 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48f43ae7ec26044372e3aa889cbf762e
f50a207753d112ac7fb97a822fec20705716569f
ac98811f73302ee01964b23d5234c6cc9b8177c6f89d87ef673ca4f911c27df6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC98811F73302EE01964B23D5234C6CC9B8177C6F89D87EF673CA4F911C27DF6"
Last-Modified: Wed, 30 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21575
Expires: Wed, 30 Nov 2022 21:38:48 GMT
Date: Wed, 30 Nov 2022 15:39:13 GMT
Connection: keep-alive
www.centroclinicoacras.com.br/
200 OK 9.6 kB URL HTTP/2 www.centroclinicoacras.com.br/
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (439)
Hash 08c6820ccd97d5df7f9d5ceee1f1d404
bf53334a2f746d05b082d4391657f150b3c3dfa7
bf25f7c9677d5409b728aa50fe5ad7919e3ab1db7de54b2fbaf624f0ddc9f661
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET / HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
last-modified: Fri, 21 Oct 2022 12:23:58 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 9644
content-type: text/html
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 33f732b4dfbd5fb3ed7345eba2896fe6
2652f214cf7127302cc65b1d4e42f48a80907d5d
904ce722469d356f8ec20c14bd51ca3ce459012ea0869f7d14821a963310a494
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DEzY/tijINtqLbtqS4Ucgw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: UYoccVse/f0wpoqmEyDPrvrkrMw=
www.googletagmanager.com/gtag/js?id=G-FBWPVCQY6G
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-FBWPVCQY6G
IP
File type ASCII text, with very long lines (22462)
Hash acdf255176a11da34e5cc033fbd68f1a
f5da8f9e48f20b4828a3f7246068d7c242bc95e8
58e20983dccfe4d9e6cb8361653a4d18563def6dccc6c3ee9a10ad914e07f8f8
GET /gtag/js?id=G-FBWPVCQY6G HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 30 Nov 2022 15:39:13 GMT
expires: Wed, 30 Nov 2022 15:39:13 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76772
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/plugins.css
200 OK 222 B URL HTTP/2 www.centroclinicoacras.com.br/css/plugins.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash c5715f3120e14cb0d59b66dade43749f
07b865fcc73c1a743d09fc1591b85320a683dd8d
7e0f26259666414d964a74bb4af16735e205f753a431f9b1d927c910f8b1ab55
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/plugins.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:52 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 222
content-type: text/css
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/custom.css
200 OK 82 B URL HTTP/2 www.centroclinicoacras.com.br/css/custom.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash c3857d49473871b3f324739035354a20
f5433ddb17f9c0c3eee5bc430d30592276739b97
51f53c9acb95a6a5ce48f4c4543112ef84420a2cd4660c2a057f02a3d66c1a4b
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/custom.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:49 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 82
content-type: text/css
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/logo/logo-b.png
200 OK 6.5 kB URL HTTP/2 www.centroclinicoacras.com.br/img/logo/logo-b.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 130 x 69, 8-bit/color RGBA, non-interlaced\012- data
Hash e852847212b04eacf6e7d6d0163c20a3
89f24f9c0cbb3338112e34e952806d854a3917cc
ee1cf2cd0bc34433d631cb0fe199d37da09289de5dad8b62c60b664a5b6fce6e
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/logo/logo-b.png HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 17 Nov 2022 20:18:25 GMT
accept-ranges: bytes
content-length: 6498
content-type: image/png
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 33f732b4dfbd5fb3ed7345eba2896fe6
2652f214cf7127302cc65b1d4e42f48a80907d5d
904ce722469d356f8ec20c14bd51ca3ce459012ea0869f7d14821a963310a494
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.centroclinicoacras.com.br/js/shadowbox/shadowbox.css
200 OK 730 B URL HTTP/2 www.centroclinicoacras.com.br/js/shadowbox/shadowbox.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 31a8257df8b99bce1a30c0483317d995
84a9b2f0f6602ec2839e75c43b74af84d9649cd5
dc239f6c8678e1e7c89400f1f81238f82d91a374d6593586fea8eccad6b3422f
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /js/shadowbox/shadowbox.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:39:45 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 730
content-type: text/css
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/js/efeitos.js
200 OK 295 B URL HTTP/2 www.centroclinicoacras.com.br/js/efeitos.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 04a8440528003c79b5b3cc84e509d307
b260bd720db91fedb1e84ea968044a072222af1d
87d31ee6b2ef1ee030ef83a86fa2ca90f9dff95bf9539dc4da46e36312fa50d5
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /js/efeitos.js HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 19:06:07 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 295
content-type: application/javascript
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/js/vendor/modernizr-3.6.0.min.js
200 OK 3.9 kB URL HTTP/2 www.centroclinicoacras.com.br/js/vendor/modernizr-3.6.0.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (8320)
Hash 19903a79b6b6f45233a4a7f90d1e8fcf
1e0104b04005689c2d9721c936dede9e314e066b
00768fae62439abe34eec7db3764414c91b7a142a00a9455564b3f6f39c216ca
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /js/vendor/modernizr-3.6.0.min.js HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:39:49 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3938
content-type: application/javascript
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/js/popper.min.js
200 OK 8.6 kB URL HTTP/2 www.centroclinicoacras.com.br/js/popper.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (20164)
Hash d87e22e968832e8f3d07ed73cfa74d43
116373c09f332836c12e6a4c89429e8800bea175
6eb12d7a9cbbf49d960662135c9fdec314b9cbc20326c06182a0214f556c1c8c
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /js/popper.min.js HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:37:29 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 8608
content-type: application/javascript
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/compare-image.css
200 OK 772 B URL HTTP/2 www.centroclinicoacras.com.br/css/compare-image.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2069), with no line terminators
Hash 6b5fe1bb53a89837b13606cacf23246f
e4ec3eefc89260980dbd6544c76d4e3767574198
a9dfec872eb6ab9cdca2dd994811585ad23266d10367bd216c2277974f239e00
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/compare-image.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/plugins.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:48 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 772
content-type: text/css
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/magnifier.css
200 OK 453 B URL HTTP/2 www.centroclinicoacras.com.br/css/magnifier.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 4d07c1881acf194d9f91c5eb863baaa4
c0ffb320883e9a283e600e09cda1396554511a93
a1812c7356608efcf01825473ac86bf3b079b4b90995e75abddce0b5f9280f65
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/magnifier.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/plugins.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:51 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 453
content-type: text/css
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/js/main.js
200 OK 8.5 kB URL HTTP/2 www.centroclinicoacras.com.br/js/main.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (507)
Hash 7bfb2addea2742d7654588cb33e994ae
5f55976b31355b96fbe68c54bbd84305b8f6fbf5
bb47bae534b4c9d435638edcca52c4c858e6177acb8a4e308c58d5bef7ac6812
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /js/main.js HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:37:28 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 8525
content-type: application/javascript
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/slicknav.css
200 OK 962 B URL HTTP/2 www.centroclinicoacras.com.br/css/slicknav.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 2cab34517809237a268bdb09166dcdd5
c85f226717996eab03f7a8de536e8a9db75842e5
ed6d64c930973f3b9534e702636c690493799419b97d10489f1f6190a53f23b2
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/slicknav.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/plugins.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:52 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 962
content-type: text/css
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/slick.min.css
200 OK 1.3 kB URL HTTP/2 www.centroclinicoacras.com.br/css/slick.min.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (2421)
Hash 38e3d5f0e0e1a7349350645cec1e6348
00fc66df2c6a19ce03a6f2528ee39d7ef93d1b9b
eb0d2fc1114e8f238f22470faec9b23487b6206846d0fdf084cdfdf9b9d9d78f
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/slick.min.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/plugins.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:52 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1338
content-type: text/css
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/justify-gallery.css
200 OK 1.9 kB URL HTTP/2 www.centroclinicoacras.com.br/css/justify-gallery.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 78a4fa5301bd632f03b4bf23431f05b7
7f0e267dd23054151ea26c1da4a81cd6ed3ffb4a
fa32ee1c8474128963f4e8fb512df1aacb8bebc9d5e6d1a8ffbd68bee2aa174a
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/justify-gallery.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/plugins.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:50 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1897
content-type: text/css
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/meanmenu.css
200 OK 1.5 kB URL HTTP/2 www.centroclinicoacras.com.br/css/meanmenu.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 762c98401beb3e3a1a457fe1e204e3e5
6c516fdfa3f9cfabbf90a8c3388b07b4059f621b
1c465ae9d3310d95645184f6ab956e4523a9b60ed6e0d5d1b2cad9258756f0e7
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/meanmenu.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/plugins.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:51 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1454
content-type: text/css
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/weather.css
200 OK 2.2 kB URL HTTP/2 www.centroclinicoacras.com.br/css/weather.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (323)
Hash 86b2e0d02a203d00ddb3b568698a2906
f2055d5efb2c97358e1f2adc89f8f546d45375a2
1ebfd140347b545a9695d14085cf92dd6b78179fdb98e267cf52929059bacc92
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/weather.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/plugins.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:53 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2216
content-type: text/css
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/elementor-icons.min.css
200 OK 2.5 kB URL HTTP/2 www.centroclinicoacras.com.br/css/elementor-icons.min.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11276)
Hash 70b4571d54494d8fab54ff6194368ccf
672fbd9cac86c3a17833b4b71a3fd1000ad6b463
fc7fcdd485e96c9207533de73348168daf1cbb35cc1f1f9b20842e97feebd940
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/elementor-icons.min.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/plugins.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:49 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2476
content-type: text/css
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/magnify.css
200 OK 2.1 kB URL HTTP/2 www.centroclinicoacras.com.br/css/magnify.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 844e84d58b5ea226253704a5fb71575b
c51f81aec30fd84a3bdb0f59bc7c53535e534f4b
ec5bef4f58870a9fd2708aeaf91525a12fc62b586b73898d8c4ad4a532bb5b0f
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/magnify.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/plugins.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:51 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2141
content-type: text/css
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/swiper.css
200 OK 4.1 kB URL HTTP/2 www.centroclinicoacras.com.br/css/swiper.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (19513)
Hash 53b7601986bdaa7e0dea5d867f7831ac
b9472e2ef5600f052a46829ebfbba5968c700dec
1bc85646dfa2e18e10687df71072eb11e8ef767d836dacda1355942214cdfbc2
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/swiper.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/plugins.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:53 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4079
content-type: text/css
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/animated-text.css
200 OK 3.9 kB URL HTTP/2 www.centroclinicoacras.com.br/css/animated-text.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 8d609e89dda5256c3f5d430a9e25d4c8
0b72addba1e19d8d15537843a1ac29fbf8868ea6
60ebc03df9d19f24b428bd517758b7b8073a2f7d9fb2a2910db2fc4808195353
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/animated-text.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/plugins.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:47 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3942
content-type: text/css
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/animation.css
200 OK 7.0 kB URL HTTP/2 www.centroclinicoacras.com.br/css/animation.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash b896451743dfe5967d85df5b0e47a626
2768f2b812455f8a30366458809ed19ffbf98925
86302a7576d9163aabc7e08dddf32f87488cd479854626d0e5e30d4691ba4f37
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/animation.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/plugins.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:47 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6959
content-type: text/css
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/font-awesome.min.css
200 OK 7.1 kB URL HTTP/2 www.centroclinicoacras.com.br/css/font-awesome.min.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (30837)
Hash 82a55032c4b614390aea6ef6870d3e90
bb21577feea531540a8d4f27ac3730ffac111e1b
4f068500ef9ef0dbffa5b76ac10f1970a7a9de8ff033f84228971a140eb20069
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/font-awesome.min.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/plugins.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:49 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7114
content-type: text/css
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/ionicons.min.css
200 OK 8.8 kB URL HTTP/2 www.centroclinicoacras.com.br/css/ionicons.min.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (50806)
Hash afe0a39ac75c6c9d65825b132ee6b607
e467a337e18a49dd9d5656a186346642868a1052
d82d166b29fc9500c262a98133157fc7ed38de63c34c57b230dc2cbcbf9f3355
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/ionicons.min.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/plugins.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:50 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 8816
content-type: text/css
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/brand/agency/brand-1.png
200 OK 6.6 kB URL HTTP/2 www.centroclinicoacras.com.br/img/brand/agency/brand-1.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 147 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash aa5b5e73d17463c6db2fee88979045d8
9d354ec8c905b3510d8e3f804dab7954c5f1073d
d2fbd8886d619fffbd76daf8e8db2d9a6bd9b7d3e85bf61145c12193757acac0
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/brand/agency/brand-1.png HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:40:52 GMT
accept-ranges: bytes
content-length: 6601
content-type: image/png
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/brand/agency/brand-2.png
200 OK 9.5 kB URL HTTP/2 www.centroclinicoacras.com.br/img/brand/agency/brand-2.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 180 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash a28a102e50ed16ad74518b23b4dab3a4
63013ee53d88e2b09bcb5d3e5a0a18da54a34dfe
37853f916819d9fdbb2129d5df9d80da9ab918dfb09173f4e610fac6a3718948
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/brand/agency/brand-2.png HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:40:52 GMT
accept-ranges: bytes
content-length: 9520
content-type: image/png
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/brand/agency/brand-5.png
200 OK 10 kB URL HTTP/2 www.centroclinicoacras.com.br/img/brand/agency/brand-5.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 180 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash e4b609cc09773c862efe46a9499236bb
a4e0154c55a99ff59a9f48556f1be6238f0c92d2
89c07032e954f06b6ce62c8c89b0748520382840feeaf27cab821c45e5c9b7d7
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/brand/agency/brand-5.png HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:40:53 GMT
accept-ranges: bytes
content-length: 10010
content-type: image/png
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/brand/agency/brand-3.png
200 OK 12 kB URL HTTP/2 www.centroclinicoacras.com.br/img/brand/agency/brand-3.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 180 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash 3181ebfc8bd7d044620601f1c0c58ea4
4894ab28ef2c46cc99e43506fd040eb8d3e7a8d6
e03803d2d77534b2e5050c9cc60d113fd399babb593ff7b1dbbd1c28ee5241da
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/brand/agency/brand-3.png HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:40:53 GMT
accept-ranges: bytes
content-length: 12381
content-type: image/png
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/brand/agency/brand-4.png
200 OK 13 kB URL HTTP/2 www.centroclinicoacras.com.br/img/brand/agency/brand-4.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 180 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash 0f65b27e700ba4ad46f0700d1f778f08
7bc39281c0372997265d9391c30c3113b024f50d
769fec21a52618b18f0c80cbaf77e9e9a87d046cb98408a15fa62341dbd2791c
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/brand/agency/brand-4.png HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:40:53 GMT
accept-ranges: bytes
content-length: 13101
content-type: image/png
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/image-grid/grid-layout-2/capa-img-grid-2.jpg
200 OK 38 kB URL HTTP/2 www.centroclinicoacras.com.br/img/image-grid/grid-layout-2/capa-img-grid-2.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=200, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=200], baseline, precision 8, 200x200, components 3\012- data
Hash f136804b5e2ae24dd623c6c0d3562bfc
38a7199f7d346a83eccf845613621156dd5a38d9
ad8d13033de717304891c555687129d5ba0db98077c9311be4b35090c95c73e6
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/image-grid/grid-layout-2/capa-img-grid-2.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:41:15 GMT
accept-ranges: bytes
content-length: 38063
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/image-grid/grid-layout-2/capa-img-grid-1.jpg
200 OK 38 kB URL HTTP/2 www.centroclinicoacras.com.br/img/image-grid/grid-layout-2/capa-img-grid-1.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop CC 2015 (Windows), datetime=2019:06:14 16:00:54], baseline, precision 8, 200x200, components 3\012- data
Hash 50f71515df5437729abb9e0d1ac81475
ca1b82e857ea19c82b497dbff1752dcd1c2ad26f
2ddde83dec4dea8c8e0323f091704d681a7dc7866949edd68e8c15f098b120ed
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/image-grid/grid-layout-2/capa-img-grid-1.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:41:15 GMT
accept-ranges: bytes
content-length: 37700
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/image-grid/grid-layout-2/capa-img-grid-4.jpg
200 OK 39 kB URL HTTP/2 www.centroclinicoacras.com.br/img/image-grid/grid-layout-2/capa-img-grid-4.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=200, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=200], baseline, precision 8, 200x200, components 3\012- data
Hash 7b1be5c221713a3c6fafb9d1853c6e6b
42ba3003a614e6a8fde42b68399f81370edb312f
38b2bf43f731e34ff89377791afd5d0b3df2f9dd9e5075bc70778c8b9bf73a5a
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/image-grid/grid-layout-2/capa-img-grid-4.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:41:16 GMT
accept-ranges: bytes
content-length: 38762
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/image-grid/grid-layout-2/capa-img-grid-3.jpg
200 OK 38 kB URL HTTP/2 www.centroclinicoacras.com.br/img/image-grid/grid-layout-2/capa-img-grid-3.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=200, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=200], baseline, precision 8, 200x200, components 3\012- data
Hash e8cc3dc1c99305a76242f5e620e87840
de1bc77814336e3b6bf478bf4a4bfd0d353c83f7
0e278475307eac9b0714d95ccf9bc7d4917323571daa4b7c401c303f49bc7bd9
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/image-grid/grid-layout-2/capa-img-grid-3.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:41:16 GMT
accept-ranges: bytes
content-length: 38485
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/image-grid/grid-layout-2/capa-img-grid-5.jpg
200 OK 43 kB URL HTTP/2 www.centroclinicoacras.com.br/img/image-grid/grid-layout-2/capa-img-grid-5.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=200, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=200], baseline, precision 8, 200x200, components 3\012- data
Hash 45ca1017e4bde79a455e8a945c165f56
fb5c910afa360eb2c0853ec794af93c8583a1a1e
ea7ffe11b3c4f4bb15c4082b0b9f4b05ea1558bef4fb11a21fc88e90f2d9d0d1
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/image-grid/grid-layout-2/capa-img-grid-5.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:41:16 GMT
accept-ranges: bytes
content-length: 42984
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/team/team-12.jpg
200 OK 46 kB URL HTTP/2 www.centroclinicoacras.com.br/img/team/team-12.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=340, bps=0, PhotometricIntepretation=BlackIsZero, orientation=upper-left, width=269], baseline, precision 8, 269x340, components 3\012- data
Hash c87ab3b73ecacbe1b01dd4f8d6ac61f5
6a3b8f28d29a81209502c872876154097f97499a
b2925333980c3fd128abc3da8f51b43607fe12eb5e336d1dfd2d4fb2e79c198f
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/team/team-12.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:39:25 GMT
accept-ranges: bytes
content-length: 45856
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/team/team-13.jpg
200 OK 59 kB URL HTTP/2 www.centroclinicoacras.com.br/img/team/team-13.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=340, bps=0, PhotometricIntepretation=BlackIsZero, orientation=upper-left, width=269], baseline, precision 8, 269x340, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 21095-29517, spot sensor temperature 1157837045393656507638218752.000000, unit celsius, color scheme 0, calibration: offset 238.446335, slope 1157837045393656507638218752.000000\012- data
Hash fd930f018dc47dffdacf986a1aedba1d
0cc1caed598d14ad97fb00f87a5ec42e75ab8469
01642a192cc6ca240dfdc9c334770ab56727b76cdeb92dfa5e65d519964fe6ba
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/team/team-13.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:39:25 GMT
accept-ranges: bytes
content-length: 58651
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/especialidades.png
200 OK 290 kB URL HTTP/2 www.centroclinicoacras.com.br/img/especialidades.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 570 x 450, 8-bit/color RGB, non-interlaced\012- data
Size 290 kB (290288 bytes)
Hash d7ccbc0d1fbef188dd162adde59f36d8
2e1df2642fecc96ac00606e42adc07ab7920a6e5
8077a68c7f741bf038f3802b65d8d60935db3ce95e2061a937b1d3c49179bfc6
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/especialidades.png HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:37:14 GMT
accept-ranges: bytes
content-length: 290288
content-type: image/png
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.centroclinicoacras.com.br/img/quem-somos-home.png
200 OK 270 kB URL HTTP/2 www.centroclinicoacras.com.br/img/quem-somos-home.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 570 x 450, 8-bit/color RGB, non-interlaced\012- data
Size 270 kB (269481 bytes)
Hash 57efcf2fc07667973e47535524c6ab20
0845960c0ead81d96044279e8fce48a61773b38c
3aa38fa52718e2e85cd70768c502c6aa76f973199de6d674fc1457ff3ce96764
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/quem-somos-home.png HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 21 Aug 2019 16:04:59 GMT
accept-ranges: bytes
content-length: 269481
content-type: image/png
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/procedimentos.png
200 OK 281 kB URL HTTP/2 www.centroclinicoacras.com.br/img/procedimentos.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 500 x 475, 8-bit/color RGBA, non-interlaced\012- data
Size 281 kB (280917 bytes)
Hash c3f1e33b236abd8a524aba7eeb55c1cd
48b91d9653fb0735ac17abbe3013097e464a9e2e
4fa46d65c8a528c843f266ffa204d6a193c65f8d40f2b19e16440005e2d46e2d
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/procedimentos.png HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:37:22 GMT
accept-ranges: bytes
content-length: 280917
content-type: image/png
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/faq.png
200 OK 282 kB URL HTTP/2 www.centroclinicoacras.com.br/img/faq.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 570 x 450, 8-bit/color RGB, non-interlaced\012- data
Size 282 kB (282384 bytes)
Hash 8a38b9f7dd3577d93755fe471f3de8e6
9a46dcada823d0ebfe60739524393379561a8fb0
b83f2c18faedb687190e9e2ad0d6e3f20f7958683e7ea4462f032df3bae7c7ab
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/faq.png HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:37:15 GMT
accept-ranges: bytes
content-length: 282384
content-type: image/png
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 3.4 kB IP
File type gzip compressed data, max compression\012- data
Hash 1e84f5189fab13c8e7647a4235827380
4f939d160d190ab1d2349f2b631ed01f7d9a2e09
3e6962b406e1b678821a173e068abb87130201b8dc2333cb45c3129d656fb3f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.centroclinicoacras.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:28:50 GMT
expires: Thu, 23 Nov 2023 19:28:50 GMT
cache-control: public, max-age=31536000
age: 591024
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.centroclinicoacras.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:52:41 GMT
expires: Tue, 28 Nov 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 161193
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/bg/bg-image-42-dia-do-anestesista.jpg
200 OK 132 kB URL HTTP/2 www.centroclinicoacras.com.br/img/bg/bg-image-42-dia-do-anestesista.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x785, components 3\012- data
Size 132 kB (132490 bytes)
Hash 8d1cd5b091e08b5146b24c261a5ece7c
59f5c2b85d978019d81fe5281dabf01cbb25af7e
96c12597e72c401693d04fb3d022be31ed9f21db4e1b2d9b799b8486b03bd32e
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/bg/bg-image-42-dia-do-anestesista.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 19:37:30 GMT
accept-ranges: bytes
content-length: 132490
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
200 OK 8.0 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.centroclinicoacras.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:28:50 GMT
expires: Thu, 23 Nov 2023 19:28:50 GMT
cache-control: public, max-age=31536000
age: 591024
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/bg/bg-image-2.jpg
200 OK 69 kB URL HTTP/2 www.centroclinicoacras.com.br/img/bg/bg-image-2.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=785, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1920x785, components 3\012- data
Hash 078144e0fd446e4a56bc5b602684dfd2
f114061550d5a012ea3ca18d298983296d8ee9c8
bf553c6debbbf0baacd11df1d18d5d5d851be69366299cef76a7674764a15326
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/bg/bg-image-2.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:38:26 GMT
accept-ranges: bytes
content-length: 69405
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/bg/bg-image-42-outubro-rosa.jpg
200 OK 72 kB URL HTTP/2 www.centroclinicoacras.com.br/img/bg/bg-image-42-outubro-rosa.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x785, components 3\012- data
Hash da011de45c818fc4941d3528cc683a2a
b23200c1b7b76b73d74f28361754a59563324128
efadc9d0a3cc6d3146a560fabb1135aea41f3ca6bbc070c4a4464fe129bfea3f
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/bg/bg-image-42-outubro-rosa.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 19:37:31 GMT
accept-ranges: bytes
content-length: 71890
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.centroclinicoacras.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 06:30:11 GMT
expires: Sat, 25 Nov 2023 06:30:11 GMT
cache-control: public, max-age=31536000
age: 464943
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/bg/bg-image-4.jpg
200 OK 57 kB URL HTTP/2 www.centroclinicoacras.com.br/img/bg/bg-image-4.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=785, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1920x785, components 3\012- data
Hash b286d1779f5b1936bfd4fd3c8a40c30f
6a00006574a9ccfe7182f9a2c941a4fdb7ed79ea
b7a11cf275fc3b627cdf77b199b2f216a5c9764ef0b2589fb08bf21f66298ac5
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/bg/bg-image-4.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:38:27 GMT
accept-ranges: bytes
content-length: 57324
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/bg/bg-image-44.jpg
200 OK 74 kB URL HTTP/2 www.centroclinicoacras.com.br/img/bg/bg-image-44.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2019:06:07 12:41:29], baseline, precision 8, 1920x379, components 3\012- data
Hash f99f52521893248793714b6550c33a8d
9ec3d3d1b80e83b72ebb6c19cb5aa09b81bd3cb3
6c895f2e11d93ce98910a5fb85f4dff77fbc87ccd41a608de77a0bcdb8b903c2
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/bg/bg-image-44.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:38:28 GMT
accept-ranges: bytes
content-length: 73767
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/bg/bg-image-3.jpg
200 OK 88 kB URL HTTP/2 www.centroclinicoacras.com.br/img/bg/bg-image-3.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=785, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1920x949, components 3\012- data
Hash 3c377f39637ba5616bdede656c8a02f3
fe6b23735410aaa36fe0144870cf7e4a68e4b98d
84c0d90a68377754ad08991905c99d875d322446e7ab961392de49d243b23b58
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/bg/bg-image-3.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:38:27 GMT
accept-ranges: bytes
content-length: 87729
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/bg/bg-image-43.jpg
200 OK 148 kB URL HTTP/2 www.centroclinicoacras.com.br/img/bg/bg-image-43.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2019:06:07 11:40:55], baseline, precision 8, 1920x785, components 3\012- data
Size 148 kB (147454 bytes)
Hash f27c9722bd94bcea509ec9043ccecc5e
28fece00d42e072682991667853f104cfda22dfe
6595613d6d8b4a30b3e88e08cb59170f838accce5b5890b4008ad872aa270bb2
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/bg/bg-image-43.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 08 Oct 2021 15:54:22 GMT
accept-ranges: bytes
content-length: 147454
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 www.centroclinicoacras.com.br/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/font-awesome.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:37:00 GMT
accept-ranges: bytes
content-length: 77160
vary: Accept-Encoding,User-Agent
content-type: font/woff2
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
code.jivosite.com/widget.js
200 OK 5.9 kB URL HTTP/2 code.jivosite.com/widget.js
IP
ASN #199524 G-Core Labs S.A.
File type ASCII text, with very long lines (17133), with no line terminators
Hash 0b2ad26c5716ae37057e5bea81d67a91
e35fc43972773ab12b15f7ef76ce4471f26cc89f
373eab35ddae8cfa38a1a00cc8c3bdd256aa37a0dde1d5e60b3f26c08ca6ed6b
GET /widget.js HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:39:14 GMT
content-type: application/javascript
content-length: 5936
access-control-allow-origin: *
cache-control: max-age=86400
content-encoding: br
etag: "6384b5f9-1730"
last-modified: Mon, 28 Nov 2022 13:22:01 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2022-11-30T13:38:50+00:00
x-id: fr5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/ajax-loader.gif
200 OK 4.2 kB URL HTTP/2 www.centroclinicoacras.com.br/img/ajax-loader.gif
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type GIF image data, version 89a, 32 x 32\012- data
Hash c5cd7f5300576ab4c88202b42f6ded62
7a1aa43614396382bb15e5fde574d9cdcd21698f
e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/ajax-loader.gif HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/slick.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:37:09 GMT
accept-ranges: bytes
content-length: 4178
content-type: image/gif
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3670.3696866211376!2d-47.20344898539604!3d-23.083559050005096!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x94c8b4b0e27bcbdd%3A0x185532c52ea32be5!2sR.+Dom+Pedro+I%2C+381+-+Cidade+Nova+I%2C+Indaiatuba+-+SP%2C+13334-100!5e0!3m2!1spt-BR!2sbr!4v1559911202121!5m2!1spt-BR!2sbr
200 OK 949 B URL HTTP/2 www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3670.3696866211376!2d-47.20344898539604!3d-23.083559050005096!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x94c8b4b0e27bcbdd%3A0x185532c52ea32be5!2sR.+Dom+Pedro+I%2C+381+-+Cidade+Nova+I%2C+Indaiatuba+-+SP%2C+13334-100!5e0!3m2!1spt-BR!2sbr!4v1559911202121!5m2!1spt-BR!2sbr
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1636)
Hash 48f9df7d64908d1e75076b8b19d46aff
82525bf80bbbe17e5b910e126fdf6574189fe832
6635f62ec36a6bd6a6659c67240a15ddcc0e9224afccc78718970a00a1f0e76f
GET /maps/embed?pb=!1m18!1m12!1m3!1d3670.3696866211376!2d-47.20344898539604!3d-23.083559050005096!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x94c8b4b0e27bcbdd%3A0x185532c52ea32be5!2sR.+Dom+Pedro+I%2C+381+-+Cidade+Nova+I%2C+Indaiatuba+-+SP%2C+13334-100!5e0!3m2!1spt-BR!2sbr!4v1559911202121!5m2!1spt-BR!2sbr HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Wed, 30 Nov 2022 15:39:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
vary: Accept-Language
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-9Y3p3wqbIrjGsfLNG8ITYw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
content-encoding: gzip
server: mafe
content-length: 949
x-xss-protection: 0
server-timing: gfet4t7; dur=249
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8808
Expires: Wed, 30 Nov 2022 18:06:03 GMT
Date: Wed, 30 Nov 2022 15:39:15 GMT
Connection: keep-alive
www.centroclinicoacras.com.br/fonts/slick.woff
200 OK 1.4 kB URL HTTP/2 www.centroclinicoacras.com.br/fonts/slick.woff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, CFF, length 1380, version 1.0\012- data
Hash b7c9e1e479de3b53f1e4e30ebac2403a
af91c12f0f406a4f801aeb3b398768fe41d8f864
26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /fonts/slick.woff HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/css/slick.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:37:05 GMT
accept-ranges: bytes
content-length: 1380
vary: Accept-Encoding,User-Agent
content-type: font/woff
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8808
Expires: Wed, 30 Nov 2022 18:06:03 GMT
Date: Wed, 30 Nov 2022 15:39:15 GMT
Connection: keep-alive
www.centroclinicoacras.com.br/images/bx_loader.gif
404 Not Found 836 B URL HTTP/2 www.centroclinicoacras.com.br/images/bx_loader.gif
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash e73571aebce42792b40325ac9117da29
d3fe79abd3a925079c1133a0d3c46fd8941514f7
2726faa315039af16d833fbca9694060c9cece0cbe9dd3069bdbba15d073aef2
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /images/bx_loader.gif HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
last-modified: Thu, 25 Aug 2022 10:26:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 836
content-type: text/html
date: Wed, 30 Nov 2022 15:39:14 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb1888-5971-4b4a-923b-dc9d4050182b.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb1888-5971-4b4a-923b-dc9d4050182b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e00769bd1391b8f4f5b8ab128a825355
e4ddf955e8ac1986045ed55880c43c69e588a021
81ca4d20c28fed8fd3135515daadc1fdbfb4198535d7c46021b418b8b98e59a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb1888-5971-4b4a-923b-dc9d4050182b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7298
x-amzn-requestid: 381e55bb-876b-46ad-84b6-1ddf9f876f56
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDcE3poAMFaAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-7c12394600900afc7281e858;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7mRG070F4NZnewfowUhVhMerJaGjJd4G6O1tvTPiKyvTAzq-Y16-jw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:56:51 GMT
etag: "e4ddf955e8ac1986045ed55880c43c69e588a021"
content-type: image/jpeg
age: 63744
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 777ce44582c70bf01a31da4cab366f36
57e1d34f146d5ccd9943aa97bcc3158f7103bb07
fbdc8f65ae74dc13b7aafec464f08fdc9902af519946200ec52432ac3ca55982
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10958
x-amzn-requestid: abfea5b0-58f5-49e1-b78e-7cf456d03cb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFHF9oIAMF5lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a20-5ab719292d440d083b07a478;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: e4GuUolL0WIMXvnF7BZ80j-dMMSILN2gd-1mqFwNns-zCUBsJa8iHQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:43:04 GMT
age: 64571
etag: "57e1d34f146d5ccd9943aa97bcc3158f7103bb07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03014221d7f49b50ffc2d1b0a0e75457
772d86ad983042a728ee3490630a9cf1134ad0dd
81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10176
x-amzn-requestid: c2231955-5c78-4073-8399-b8b90f1add78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMo3oHpSoAMF5Qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bb63-55a1cb004ac73c8b02f2fb8d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:08:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7LVxajVjJ1N2W-jxCmKpYHg1rS1MbrRnAVc15QmM0iH94CH1yJnR0w==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 04:53:01 GMT
age: 38774
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05196ec43964cf559caa0c0279148d62
6170d6776615503e3e29f86783febc3e3e78ca66
47f3a5cde661987e3496ce110a0170b10087dd9ba8d4fd691c4830587ba3fa3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9051
x-amzn-requestid: 1032dd9c-a15e-4e8a-9c81-07419e8caf67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhGvEMNIAMFaKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bc4-1005c20a33320dbf6567ca31;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rtfl896JX35oFFEVmqyH9Nm62iSY6rqwzkLwZMcM45p_ySF6J2QwEQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:47 GMT
age: 64468
etag: "6170d6776615503e3e29f86783febc3e3e78ca66"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 59baec8db5ced0210ab766ea5636a5fd
f7cf3a0f89751a02fbcf8d21f505f24a74e8b30b
33ff55891f18c22970804f1b8b2ba6821ddfd7426b01486410bd43f2b4295a8d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5785
x-amzn-requestid: ee77265b-8e90-4035-8ef1-92a2d26aaefa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaHdWoAMFqmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-0d10d74030e7aee74804b654;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GydenCzPtpFdVLqN4ssiZ4dKN48WGneS3mwzEdDE81pobtLznfC4VQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:07:59 GMT
age: 63076
etag: "f7cf3a0f89751a02fbcf8d21f505f24a74e8b30b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bbe350ea797a0fec5a19a450fc5de4b4
2f3a39a528d3b759060203931de33c12303592e1
4d661dac2e19e07ae15d0f8cf00bd268c6c2defb2f5e4de38fcb6e7031dfd605
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9330
x-amzn-requestid: 3fad352d-7664-43e0-9395-e840f671ca61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFQFIdoAMFSmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a21-5e9847852f8435231d401fe6;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mCEtSOenWKxay4vNy5mN9cexxXKXKt7TMuLaLw-M86tLKwQ2MwuxPg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:11:32 GMT
age: 62863
etag: "2f3a39a528d3b759060203931de33c12303592e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
code.jivosite.com/script/widget/config/iNCZjOtcK9
200 OK 801 B URL HTTP/2 code.jivosite.com/script/widget/config/iNCZjOtcK9
IP
ASN #199524 G-Core Labs S.A.
File type JSON data\012- , ASCII text, with very long lines (1546), with no line terminators
Hash f489a17f27408b891688f4d3e0d46e49
fb5de4f4140a2207e3ee8a6eac98ed19502b5684
26ed38c3751da8adc5e5810e4ab460975908ed14a63ce27e02de5dde349258ee
GET /script/widget/config/iNCZjOtcK9 HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.centroclinicoacras.com.br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:39:15 GMT
content-type: application/x-javascript
content-length: 801
access-control-allow-origin: *
cache-control: max-age=7200
content-encoding: gzip
expires: Wed, 30 Nov 2022 17:39:06 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2022-11-30T15:39:06+00:00
x-id: fr5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
maps.gstatic.com/maps-api-v3/embed/js/51/1/intl/pt_br/init_embed.js
200 OK 69 kB URL HTTP/2 maps.gstatic.com/maps-api-v3/embed/js/51/1/intl/pt_br/init_embed.js
IP
File type ASCII text, with very long lines (2669)
Hash d3dd1dc30b1182b52d936428daba4ec4
bafc83f984c4eff5c5eeab29fb998f3516d09392
e28892652dc79a10cd94ba50721782a21ae8bb65ebf79293905bc336b175628e
GET /maps-api-v3/embed/js/51/1/intl/pt_br/init_embed.js HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 68972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 16:20:03 GMT
expires: Tue, 28 Nov 2023 16:20:03 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 21:36:22 GMT
content-type: text/javascript
age: 170352
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: nKn6V3ZHk/14ePZ+snON0pEykLH8YhqkOK4U60PBvBZOYrIOYN4HN1J1ps8x7on4/rVcv4lHPzXdzFAOZiosEg==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 2050670934
date: Wed, 30 Nov 2022 15:39:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1908e90138fc34a534b90f254e28cb3b
76ee78d4e850e58a30245ac4aa5526318de8de48
16decebf47c75ab4df0a9683a6edffcf7b8ed7f799d255989b52df3f983299c1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1090
Cache-Control: max-age=151763
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:15 GMT
Etag: "638722b4-1d7"
Expires: Fri, 02 Dec 2022 09:48:38 GMT
Last-Modified: Wed, 30 Nov 2022 09:30:28 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5d950b70d3b1532276ed817249b72618
dca7faf727b8afdd481c8f8bcc3e9129fdadadc3
afe3fbe5f269179e18a66ca806664b7f96b903150b364129e2f2b30087198e34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/AW-935831123/?random=1669822753944&cv=11&fst=1669822753944&bg=ffffff&guid=ON&async=1>m=2wgbs0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.centroclinicoacras.com.br%2F&tiba=Centro%20Cl%C3%ADnico%20Acras&auid=1873638780.1669822754&rfmt=3&fmt=4
200 OK 876 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/AW-935831123/?random=1669822753944&cv=11&fst=1669822753944&bg=ffffff&guid=ON&async=1>m=2wgbs0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.centroclinicoacras.com.br%2F&tiba=Centro%20Cl%C3%ADnico%20Acras&auid=1873638780.1669822754&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (1829), with no line terminators
Hash df9dd3cc46a214adb6118f090ba03d61
090db891f738a39ccb386f603a06c6a7bd6128c4
9147f05b308e73c49302ba335527cfc6ad901d97d40598eaa71fdb2776253cbf
GET /pagead/viewthroughconversion/AW-935831123/?random=1669822753944&cv=11&fst=1669822753944&bg=ffffff&guid=ON&async=1>m=2wgbs0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.centroclinicoacras.com.br%2F&tiba=Centro%20Cl%C3%ADnico%20Acras&auid=1873638780.1669822754&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 30 Nov 2022 15:39:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 876
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 30-Nov-2022 15:54:15 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/favicon.png
200 OK 3.1 kB URL HTTP/2 www.centroclinicoacras.com.br/img/favicon.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 8f52ba7c5e291b7d8e1917e9e4233b7e
9ffd1ae6da8a3495bc5ecaba5ef40f2f75d876ee
b1877b07f08f39918f28cfaab6722126a277161e219384ebb886ed9295128357
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/favicon.png HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Cookie: _gcl_au=1.1.1873638780.1669822754
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:37:16 GMT
accept-ranges: bytes
content-length: 3098
content-type: image/png
date: Wed, 30 Nov 2022 15:39:15 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/img/icon.png
200 OK 4.0 kB URL HTTP/2 www.centroclinicoacras.com.br/img/icon.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced\012- data
Hash 7676155efec287aaaa1b78ea9a79120d
2e2866bf9acc59972ff373313a4a55d63a99d5fa
e7c5868037962cd3c9d84c8fc0063228d260eae3f470cfb22ca264ec43383314
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /img/icon.png HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Cookie: _gcl_au=1.1.1873638780.1669822754
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:37:17 GMT
accept-ranges: bytes
content-length: 4029
content-type: image/png
date: Wed, 30 Nov 2022 15:39:15 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5d950b70d3b1532276ed817249b72618
dca7faf727b8afdd481c8f8bcc3e9129fdadadc3
afe3fbe5f269179e18a66ca806664b7f96b903150b364129e2f2b30087198e34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3402a11f28d369c1ad537c8e44ba5568
17c9fc852ca71dc4d46f786537adda4ee0e9a3ef
dd142866516f3293fab9f67f092d37b70c39fc58512734c8e88dab5c5faf7264
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/AW-935831123/?random=1669822753944&cv=11&fst=1669820400000&bg=ffffff&guid=ON&async=1>m=2wgbs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.centroclinicoacras.com.br%2F&tiba=Centro%20Cl%C3%ADnico%20Acras&fmt=3&is_vtc=1&random=1793203958&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/AW-935831123/?random=1669822753944&cv=11&fst=1669820400000&bg=ffffff&guid=ON&async=1>m=2wgbs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.centroclinicoacras.com.br%2F&tiba=Centro%20Cl%C3%ADnico%20Acras&fmt=3&is_vtc=1&random=1793203958&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/AW-935831123/?random=1669822753944&cv=11&fst=1669820400000&bg=ffffff&guid=ON&async=1>m=2wgbs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.centroclinicoacras.com.br%2F&tiba=Centro%20Cl%C3%ADnico%20Acras&fmt=3&is_vtc=1&random=1793203958&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 30 Nov 2022 15:39:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3402a11f28d369c1ad537c8e44ba5568
17c9fc852ca71dc4d46f786537adda4ee0e9a3ef
dd142866516f3293fab9f67f092d37b70c39fc58512734c8e88dab5c5faf7264
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:39:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
node-ya11.jivosite.com/widget/status/583937/iNCZjOtcK9?rnd=0.32954658787402624
200 OK 80 B URL HTTP/2 node-ya11.jivosite.com/widget/status/583937/iNCZjOtcK9?rnd=0.32954658787402624
IP
ASN #200350 Yandex.Cloud LLC
File type JSON data\012- , ASCII text, with no line terminators
Hash a563260064809fa5248fd6f0d357b3ab
2db0a2391fb6f64c1b9b187e7f3b8eff33f9fbf6
117bcfda2b5e27621fae50d9dae63ffc8e68b1c66fcca4ccdc6b51c9d4eb52d6
GET /widget/status/583937/iNCZjOtcK9?rnd=0.32954658787402624 HTTP/1.1
Host: node-ya11.jivosite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.centroclinicoacras.com.br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-max-age: 1728000
access-control-allow-origin: https://www.centroclinicoacras.com.br
access-control-expose-headers: X-Geoip, X-Botmode
cache-control: no-cache, no-store, must-revalidate
content-security-policy: frame-ancestors 'none';
content-type: application/json; charset=utf-8
pragma: no-cache
server: foxy/2.0.1
x-botmode: no
x-frame-options: DENY
x-geoip: NO;03;Oslo (Alna District)
content-length: 80
date: Wed, 30 Nov 2022 15:39:15 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=2121815304806863&ev=PageView&dl=https%3A%2F%2Fwww.centroclinicoacras.com.br%2F&rl=&if=false&ts=1669822754357&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.2.1669822754356.2131454536&it=1669822754128&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=2121815304806863&ev=PageView&dl=https%3A%2F%2Fwww.centroclinicoacras.com.br%2F&rl=&if=false&ts=1669822754357&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.2.1669822754356.2131454536&it=1669822754128&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=2121815304806863&ev=PageView&dl=https%3A%2F%2Fwww.centroclinicoacras.com.br%2F&rl=&if=false&ts=1669822754357&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.2.1669822754356.2131454536&it=1669822754128&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 30 Nov 2022 15:39:15 GMT
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-FBWPVCQY6G>m=2oebs0&_p=212325351&cid=1013400806.1669822754&ul=en-us&sr=1280x1024&_s=1&sid=1669822753&sct=1&seg=0&dl=https%3A%2F%2Fwww.centroclinicoacras.com.br%2F&dt=Centro%20Cl%C3%ADnico%20Acras&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-FBWPVCQY6G>m=2oebs0&_p=212325351&cid=1013400806.1669822754&ul=en-us&sr=1280x1024&_s=1&sid=1669822753&sct=1&seg=0&dl=https%3A%2F%2Fwww.centroclinicoacras.com.br%2F&dt=Centro%20Cl%C3%ADnico%20Acras&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-FBWPVCQY6G>m=2oebs0&_p=212325351&cid=1013400806.1669822754&ul=en-us&sr=1280x1024&_s=1&sid=1669822753&sct=1&seg=0&dl=https%3A%2F%2Fwww.centroclinicoacras.com.br%2F&dt=Centro%20Cl%C3%ADnico%20Acras&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.centroclinicoacras.com.br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.centroclinicoacras.com.br
date: Wed, 30 Nov 2022 15:39:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 9856b996bc84fa19198ae520ef98bfcf
c40b9f2bcdfdbb54ff2a08535cb40370625d8a00
80119983ed422b1ccd5da25a6feefe4dee9fbcc33459f1a0b7574e02b8b1def5
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 30 Nov 2022 15:39:16 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 29 Nov 2022 20:13:14 GMT
Expires: Wed, 30 Nov 2022 20:13:14 GMT
ETag: "c40b9f2bcdfdbb54ff2a08535cb40370625d8a00"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
code.jivosite.com/js/bundle_pt_BR.js?rand=1669813713
200 OK 311 kB URL HTTP/2 code.jivosite.com/js/bundle_pt_BR.js?rand=1669813713
IP
ASN #199524 G-Core Labs S.A.
File type Unicode text, UTF-8 text, with very long lines (65356), with no line terminators
Size 311 kB (311340 bytes)
Hash d064bd8b0d65586d06744380872335c0
3da42596fd8511c4ea3155256a5c3e0c34d3f373
c4663defa987712948e2caed04ea8df858af0cfb2904e655f438b9cc1ae3937e
GET /js/bundle_pt_BR.js?rand=1669813713 HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:39:16 GMT
content-type: application/javascript
content-length: 311340
access-control-allow-origin: *
cache-control: max-age=86400
content-encoding: br
etag: "6384b652-4c02c"
last-modified: Mon, 28 Nov 2022 13:23:30 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2022-11-30T13:36:38+00:00
x-id: fr5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
d335luupugsy2.cloudfront.net/js/integration/stable/rd-js-integration.min.js?v=1
200 OK 5.1 kB URL HTTP/2 d335luupugsy2.cloudfront.net/js/integration/stable/rd-js-integration.min.js?v=1
IP
File type Unicode text, UTF-8 text, with very long lines (14095)
Hash 037b8303bce609f3647bd079508031b2
b76218de9ed86ba5eb7a432f264c016da0b044ea
c2a0cc110766fc701e4aad2ec2deb59fdbdcbc1b22c957832948377d456fa87a
GET /js/integration/stable/rd-js-integration.min.js?v=1 HTTP/1.1
Host: d335luupugsy2.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 5126
last-modified: Mon, 14 Mar 2022 19:11:46 GMT
content-encoding: gzip
x-amz-version-id: EFK6hy2tasKcabJ9JHnpmDSfRZbvtSM9
accept-ranges: bytes
server: AmazonS3
date: Tue, 29 Nov 2022 20:21:19 GMT
cache-control: max-age=86400, must-revalidate
etag: "037b8303bce609f3647bd079508031b2"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hy4XfP5C55Jz9JxafS8HDQFgiX835JWdKnwWPnoLYIBcZTpIi0Paow==
age: 69500
X-Firefox-Spdy: h2
d335luupugsy2.cloudfront.net/js/rdstation-popups/bricks/rdstation-popup.min.js?v=1
200 OK 56 kB URL HTTP/2 d335luupugsy2.cloudfront.net/js/rdstation-popups/bricks/rdstation-popup.min.js?v=1
IP
File type Unicode text, UTF-8 text, with very long lines (65224)
Hash 0745a774ff7c7e1979835e815fedb0c4
0432043be5a45c2bae353163bad348047a498160
361f3851dc0b75b8fda43f41acdce3fddb156c0df39218304149cb6e3e7459bb
GET /js/rdstation-popups/bricks/rdstation-popup.min.js?v=1 HTTP/1.1
Host: d335luupugsy2.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 55730
last-modified: Thu, 01 Sep 2022 18:56:54 GMT
content-encoding: gzip
x-amz-version-id: Rdke.7MSx732uledJxJP7l.H8q8C1Qau
accept-ranges: bytes
server: AmazonS3
date: Tue, 29 Nov 2022 16:10:24 GMT
etag: "0745a774ff7c7e1979835e815fedb0c4"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E2dckLpkWrKqrVoDsZqnjWZP8gZ0Eo5VTqZ_dtJbJ5xvIdBsBrqvpQ==
age: 84544
X-Firefox-Spdy: h2
code.jivosite.com/css/e167154/widget.css
200 OK 55 kB URL HTTP/2 code.jivosite.com/css/e167154/widget.css
IP
ASN #199524 G-Core Labs S.A.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 53ec3949b1ce352a32c2cd000acb1b13
ee2a13c128338764b047f3752a00486421c35461
8f4c829d135a0490ecadb8dd7212d8a8cdfd083197d96c6888d7a3328f424d92
GET /css/e167154/widget.css HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:39:16 GMT
content-type: text/css
content-length: 54832
cache-control: max-age=864000
content-encoding: br
etag: "6384b63b-d630"
expires: Sat, 10 Dec 2022 13:40:07 GMT
last-modified: Mon, 28 Nov 2022 13:23:07 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2022-11-30T13:40:07+00:00
x-id: fr5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
code.jivosite.com/js/e167154/omnichannelMenu.js
200 OK 3.1 kB URL HTTP/2 code.jivosite.com/js/e167154/omnichannelMenu.js
IP
ASN #199524 G-Core Labs S.A.
File type ASCII text, with very long lines (11729), with no line terminators
Hash a22593d0ee95121bd3fa64d1a5c84d3e
89120207e292a94eca692d63b74a115e44fc44bd
708c4374987ae1c7bb042a466e834a9ae912e7cc9759d8a51a1cfb22b8009528
GET /js/e167154/omnichannelMenu.js HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:39:16 GMT
content-type: application/javascript
content-length: 3114
access-control-allow-origin: *
cache-control: max-age=86400
content-encoding: br
etag: "6384b63b-c2a"
last-modified: Mon, 28 Nov 2022 13:23:07 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2022-11-30T13:38:50+00:00
x-id: fr5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
code.jivosite.com/css/e167154/omnichannelMenu.widget.css
200 OK 945 B URL HTTP/2 code.jivosite.com/css/e167154/omnichannelMenu.widget.css
IP
ASN #199524 G-Core Labs S.A.
File type ASCII text, with very long lines (3072), with no line terminators
Hash 63f4ca1b65aae4d96355d1533b55936a
d06b4e589d230a17f7d090644c58b428b0007df7
d7b9e039babba652b005eeba85cc380a1c8a4e43f93b5f3f9fc425b70bac0706
GET /css/e167154/omnichannelMenu.widget.css HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:39:16 GMT
content-type: text/css
content-length: 945
cache-control: max-age=864000
content-encoding: gzip
etag: "6384b63b-3b1"
expires: Sat, 10 Dec 2022 13:38:50 GMT
last-modified: Mon, 28 Nov 2022 13:23:07 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2022-11-30T13:38:50+00:00
x-id: fr5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
code.jivosite.com/sounds/agent_message.mp3
206 Partial Content 3.8 kB URL HTTP/2 code.jivosite.com/sounds/agent_message.mp3
IP
ASN #199524 G-Core Labs S.A.
File type MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo\012- data
Hash 8e9a165c4cb185ffd0b2658fa088e43b
195873e5e8bbb2f5ecc32d95f90d6fb75817a649
ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43
GET /sounds/agent_message.mp3 HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Wed, 30 Nov 2022 15:39:16 GMT
content-type: audio/mpeg
content-length: 3760
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: max-age=2592000
etag: "6384b5cb-eb0"
expires: Fri, 30 Dec 2022 13:37:45 GMT
last-modified: Mon, 28 Nov 2022 13:21:15 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2022-11-30T13:37:45+00:00
x-id: fr5-up-gc15
content-range: bytes 0-3759/3760
X-Firefox-Spdy: h2
code.jivosite.com/sounds/notification.mp3
206 Partial Content 5.8 kB URL HTTP/2 code.jivosite.com/sounds/notification.mp3
IP
ASN #199524 G-Core Labs S.A.
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 9aa341af370c4e59155717260ba0f282
0c1216ecead8d1409557c843d96202c063f3f252
1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab
GET /sounds/notification.mp3 HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Wed, 30 Nov 2022 15:39:16 GMT
content-type: audio/mpeg
content-length: 5808
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: max-age=2592000
etag: "6384b5cb-16b0"
expires: Fri, 30 Dec 2022 13:39:49 GMT
last-modified: Mon, 28 Nov 2022 13:21:15 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2022-11-30T13:39:49+00:00
x-id: fr5-up-gc15
content-range: bytes 0-5807/5808
X-Firefox-Spdy: h2
code.jivosite.com/sounds/outgoing_message.mp3
206 Partial Content 5.0 kB URL HTTP/2 code.jivosite.com/sounds/outgoing_message.mp3
IP
ASN #199524 G-Core Labs S.A.
File type MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo\012- data
Hash 7bf3e4962a5ecf1f8cbcc2ff3428f531
f75c694461a643d2e096ae8d0f6c1a9d19602eee
d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11
GET /sounds/outgoing_message.mp3 HTTP/1.1
Host: code.jivosite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Wed, 30 Nov 2022 15:39:16 GMT
content-type: audio/mpeg
content-length: 5014
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: max-age=2592000
etag: "6384b5cb-1396"
expires: Fri, 30 Dec 2022 13:37:01 GMT
last-modified: Mon, 28 Nov 2022 13:21:15 GMT
vary: Accept-Encoding
via: 1.1 sharxy
x-geo-shard: ya
cache: HIT
x-cached-since: 2022-11-30T13:37:01+00:00
x-id: fr5-up-gc15
content-range: bytes 0-5013/5014
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3c09f7acc6d70c6b3a81112ce3b40e5b
41f47e9d863dcf7b22ba51c3837e3a7103f3a8ad
1c4b1a84259f127819578a765407b3fed3d7a104fe1dcb2febd5363c053fca60
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1C4B1A84259F127819578A765407B3FED3D7A104FE1DCB2FEBD5363C053FCA60"
Last-Modified: Tue, 29 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5518
Expires: Wed, 30 Nov 2022 17:11:15 GMT
Date: Wed, 30 Nov 2022 15:39:17 GMT
Connection: keep-alive
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type gzip compressed data, max compression\012- data
Hash 2c5e576c986fa3babe2c32f4a7ca3f3c
2f9f0aaf63ec000b07fc073c26fddfb6ab4e4466
f560931ec3844307c32fb2b1503925261fc99f30ecd22d27664b104e13e5567c
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:33:54 GMT
expires: Thu, 23 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 590723
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
popups.rdstation.com.br/popup/show.json?account_id=500961&uniq=_7pwxqv33t&ref=aHR0cHM6Ly93d3cuY2VudHJvY2xpbmljb2FjcmFzLmNvbS5ici8%3D
200 OK 52 kB URL HTTP/2 popups.rdstation.com.br/popup/show.json?account_id=500961&uniq=_7pwxqv33t&ref=aHR0cHM6Ly93d3cuY2VudHJvY2xpbmljb2FjcmFzLmNvbS5ici8%3D
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (51607), with no line terminators
Hash 2df2a61b85c551937b61e1a2cd455018
5cc571263d0aefea7d4ba7ab5c6e6b693f64f76a
b7a13e5f0b3d8dd5f3442df37488315a94a53b1db257965bbbed433fcaef8a4d
GET /popup/show.json?account_id=500961&uniq=_7pwxqv33t&ref=aHR0cHM6Ly93d3cuY2VudHJvY2xpbmljb2FjcmFzLmNvbS5ici8%3D HTTP/1.1
Host: popups.rdstation.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.centroclinicoacras.com.br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
content-type: application/json
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=7776000
x-frame-options: sameorigin
content-length: 51609
date: Wed, 30 Nov 2022 15:39:17 GMT
X-Firefox-Spdy: h2
d335luupugsy2.cloudfront.net/cms/files/1446/1588875979/$5u0ndp8vgxo
200 OK 4.3 kB URL HTTP/2 d335luupugsy2.cloudfront.net/cms/files/1446/1588875979/$5u0ndp8vgxo
IP
File type PNG image data, 60 x 61, 8-bit/color RGBA, non-interlaced\012- data
Hash 4a316bcf8bd859ab679d26643c241056
f533c6731fa834c1d73f133eddcd729c6a0df458
f21fbdef688ebf03e844d7ab41038b6684126ae6c7c6e69815e051332ff639ed
GET /cms/files/1446/1588875979/$5u0ndp8vgxo HTTP/1.1
Host: d335luupugsy2.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4330
last-modified: Thu, 07 May 2020 20:59:36 GMT
x-amz-version-id: Gwu..4_Ogx6hswUdr__BxG2Esf4D8M63
accept-ranges: bytes
server: AmazonS3
date: Wed, 30 Nov 2022 01:11:15 GMT
etag: "4a316bcf8bd859ab679d26643c241056"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rmudnLmpp0b8HI2ni7MJns8CmhULQWnaiRLz7jWzsoakY2kYACipRg==
age: 52099
X-Firefox-Spdy: h2
d335luupugsy2.cloudfront.net/cms/files/500961/1659117387/$mwobjn80a
200 OK 103 kB URL HTTP/2 d335luupugsy2.cloudfront.net/cms/files/500961/1659117387/$mwobjn80a
IP
File type PNG image data, 830 x 814, 8-bit/color RGB, non-interlaced\012- data
Size 103 kB (102858 bytes)
Hash 561ae894a1992a09fe0ce9e8e5cdc5b6
2b1c54750dc6fed2019943ef89bd8f30d4acc59e
c7c9c7cb3a1da2fd047c3b97aaa2dde2923083d2c727ba7a13d3b8c79a5134d4
GET /cms/files/500961/1659117387/$mwobjn80a HTTP/1.1
Host: d335luupugsy2.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 102858
last-modified: Fri, 29 Jul 2022 18:01:36 GMT
x-amz-version-id: bj9UFmz8MwLwRc3R1YObvP9FvymoYjCi
accept-ranges: bytes
server: AmazonS3
date: Wed, 30 Nov 2022 15:39:09 GMT
etag: "561ae894a1992a09fe0ce9e8e5cdc5b6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uWzVJm0coiHAXrVGM8gIq3TmQqRGbLDo3fJRiUmvvF1pgffJJRQQbA==
age: 8
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13036, version 1.0\012- data
Hash 0ad032b3d07aaf33b160ac4799dda40f
06b931e0d0bf37f5037d9e66d6feedfddd21c0ba
c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0
GET /s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.centroclinicoacras.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13036
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:28:49 GMT
expires: Thu, 23 Nov 2023 19:28:49 GMT
cache-control: public, max-age=31536000
age: 591028
last-modified: Wed, 27 Apr 2022 16:04:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.centroclinicoacras.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:52:55 GMT
expires: Tue, 28 Nov 2023 18:52:55 GMT
cache-control: public, max-age=31536000
age: 161182
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
telemetry.jivosite.com/w
204 No Content 0 B IP
ASN #208677 Cloud technology Limited (Ltd.)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /w HTTP/1.1
Host: telemetry.jivosite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 282
Origin: https://www.centroclinicoacras.com.br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: JivoTelemetry/fix-jivoapp-telemetry
Date: Wed, 30 Nov 2022 15:39:17 GMT
www.centroclinicoacras.com.br/consultaBlog.php
200 OK 3.0 kB URL HTTP/2 www.centroclinicoacras.com.br/consultaBlog.php
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (850)
Hash 4843d34af4dde671f244990fd4523450
25f6408a30435b066d4dfdaf6412922ee6ed4936
1024042054603ccbb86cf73fc0caa5dcdb64f036099d8ef590bba1fd30ae58cd
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /consultaBlog.php HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Cookie: _gcl_au=1.1.1873638780.1669822754; _ga_FBWPVCQY6G=GS1.1.1669822753.1.0.1669822753.0.0.0; _ga=GA1.1.1013400806.1669822754; _ga_KRZS4D9Q27=GS1.1.1669822754.1.0.1669822754.0.0.0; _fbp=fb.2.1669822754356.2131454536; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNjY5ODIyNzU0ODUyfQ==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1696
content-type: text/html; charset=UTF-8
date: Wed, 30 Nov 2022 15:39:18 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/blog/wp-content/uploads/2022/11/IMG-20191016-WA0022.jpg
200 OK 58 kB URL HTTP/2 www.centroclinicoacras.com.br/blog/wp-content/uploads/2022/11/IMG-20191016-WA0022.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 753x407, components 3\012- data
Hash 39b4dd5e9c710ff1ea6a2a8eb524e31a
41bb8d4963b7612d399bc172215703cbc52230e4
47757037f932ff99ee125f196e766359bdd8a9adb572a3090b00d518868ebc7c
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /blog/wp-content/uploads/2022/11/IMG-20191016-WA0022.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Cookie: _gcl_au=1.1.1873638780.1669822754; _ga_FBWPVCQY6G=GS1.1.1669822753.1.0.1669822753.0.0.0; _ga=GA1.1.1013400806.1669822754; _ga_KRZS4D9Q27=GS1.1.1669822754.1.0.1669822754.0.0.0; _fbp=fb.2.1669822754356.2131454536; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNjY5ODIyNzU0ODUyfQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 08 Nov 2022 20:09:44 GMT
accept-ranges: bytes
content-length: 57744
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:18 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/blog/wp-content/uploads/2022/09/young-woman-hand-holding-pregnancy-test-1-768x513.jpg
200 OK 44 kB URL HTTP/2 www.centroclinicoacras.com.br/blog/wp-content/uploads/2022/09/young-woman-hand-holding-pregnancy-test-1-768x513.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=15, height=4912, bps=194, PhotometricIntepretation=RGB, description=Young woman hand holding pregnancy test , manufacturer=NIKON CORPORATION, model=NIKON D810, orientation=upper-left, width=7360], baseline, precision 8, 768x513, components 3\012- data
Hash 7a2471335dbffd6216f420dbb758565e
aea417e3cfacaf6408efa29f087fa6ba71def31f
16a515baf2ad15a6db4161afc013bab21cf47f07511a80654958241f62884f3d
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /blog/wp-content/uploads/2022/09/young-woman-hand-holding-pregnancy-test-1-768x513.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Cookie: _gcl_au=1.1.1873638780.1669822754; _ga_FBWPVCQY6G=GS1.1.1669822753.1.0.1669822753.0.0.0; _ga=GA1.1.1013400806.1669822754; _ga_KRZS4D9Q27=GS1.1.1669822754.1.0.1669822754.0.0.0; _fbp=fb.2.1669822754356.2131454536; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNjY5ODIyNzU0ODUyfQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Sep 2022 16:18:35 GMT
accept-ranges: bytes
content-length: 43565
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:18 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/blog/wp-content/uploads/2022/09/man-stress-out-and-cover-his-face-by-his-hands-768x512.jpg
200 OK 62 kB URL HTTP/2 www.centroclinicoacras.com.br/blog/wp-content/uploads/2022/09/man-stress-out-and-cover-his-face-by-his-hands-768x512.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=15, height=3840, bps=194, PhotometricIntepretation=RGB, description=man stress out and cover his face by his hands, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left, width=5760], baseline, precision 8, 768x512, components 3\012- data
Hash 6dffa9c6d9f8c91dcb9d7ed445fb02bd
dcc3712c169a3b1389efe38c4f60e84076dede19
fe4a9f07abc269e2f341841c74abab6d7c0f86a0b67da66ecc171812ec4c4d74
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /blog/wp-content/uploads/2022/09/man-stress-out-and-cover-his-face-by-his-hands-768x512.jpg HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Cookie: _gcl_au=1.1.1873638780.1669822754; _ga_FBWPVCQY6G=GS1.1.1669822753.1.0.1669822753.0.0.0; _ga=GA1.1.1013400806.1669822754; _ga_KRZS4D9Q27=GS1.1.1669822754.1.0.1669822754.0.0.0; _fbp=fb.2.1669822754356.2131454536; __trf.src=encoded_eyJmaXJzdF9zZXNzaW9uIjp7InZhbHVlIjoiKG5vbmUpIiwiZXh0cmFfcGFyYW1zIjp7fX0sImN1cnJlbnRfc2Vzc2lvbiI6eyJ2YWx1ZSI6Iihub25lKSIsImV4dHJhX3BhcmFtcyI6e319LCJjcmVhdGVkX2F0IjoxNjY5ODIyNzU0ODUyfQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Sep 2022 18:45:33 GMT
accept-ranges: bytes
content-length: 61849
content-type: image/jpeg
date: Wed, 30 Nov 2022 15:39:18 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/js/vendor/jquery-3.3.1.min.js
200 OK 0 B URL HTTP/2 www.centroclinicoacras.com.br/js/vendor/jquery-3.3.1.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /js/vendor/jquery-3.3.1.min.js HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:39:49 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: application/javascript
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/js/jquery.bxslider.js
200 OK 0 B URL HTTP/2 www.centroclinicoacras.com.br/js/jquery.bxslider.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /js/jquery.bxslider.js HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:37:27 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: application/javascript
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/js/plugins.js
200 OK 0 B URL HTTP/2 www.centroclinicoacras.com.br/js/plugins.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /js/plugins.js HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:37:29 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: application/javascript
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
d335luupugsy2.cloudfront.net/js/loader-scripts/46547387-2498-40c6-ad5e-97bd792760dc-loader.js
200 OK 0 B URL HTTP/2 d335luupugsy2.cloudfront.net/js/loader-scripts/46547387-2498-40c6-ad5e-97bd792760dc-loader.js
IP
GET /js/loader-scripts/46547387-2498-40c6-ad5e-97bd792760dc-loader.js HTTP/1.1
Host: d335luupugsy2.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 21 Oct 2022 14:07:52 GMT
x-amz-version-id: IuM2nnRc0UjW5V.PtAXqEW1LP3ZcYWUe
server: AmazonS3
content-encoding: gzip
date: Wed, 30 Nov 2022 15:39:16 GMT
cache-control: no-cache
etag: W/"e7f9af5f1c5051ee4f2660345d17844a"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cNUKptLyvBTcimNMsnNI7VZ1LBVA44pI_jarV_Fsdqr5KJPelNspCQ==
X-Firefox-Spdy: h2
d335luupugsy2.cloudfront.net/js/traffic-source-cookie/stable/traffic-source-cookie.min.js
200 OK 0 B URL HTTP/2 d335luupugsy2.cloudfront.net/js/traffic-source-cookie/stable/traffic-source-cookie.min.js
IP
GET /js/traffic-source-cookie/stable/traffic-source-cookie.min.js HTTP/1.1
Host: d335luupugsy2.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 30 Nov 2022 05:22:48 GMT
last-modified: Thu, 17 Nov 2022 14:58:51 GMT
etag: W/"60c4a92725ecad7b22391e314ecef104"
x-amz-version-id: _DcRcF.3JZ4tSr0ScmnT0Msp3iEBkteK
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DixbBvu5IkGEzGAIL7WSsrSxZEf0Ip1uERaD0ZkEJ-yX_8jv7iRvkg==
age: 36989
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 www.centroclinicoacras.com.br/css/bootstrap.min.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /css/bootstrap.min.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:36:48 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: text/css
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/js/jquery.js
200 OK 0 B URL HTTP/2 www.centroclinicoacras.com.br/js/jquery.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /js/jquery.js HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 06 Dec 2019 19:44:16 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: application/javascript
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/style.css
200 OK 0 B URL HTTP/2 www.centroclinicoacras.com.br/style.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /style.css HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 21 Oct 2022 12:23:59 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: text/css
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/js/bootstrap.min.js
200 OK 0 B URL HTTP/2 www.centroclinicoacras.com.br/js/bootstrap.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /js/bootstrap.min.js HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:37:27 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: application/javascript
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
www.centroclinicoacras.com.br/js/shadowbox/shadowbox.js
200 OK 0 B URL HTTP/2 www.centroclinicoacras.com.br/js/shadowbox/shadowbox.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /js/shadowbox/shadowbox.js HTTP/1.1
Host: www.centroclinicoacras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.centroclinicoacras.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jul 2019 14:39:46 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: application/javascript
date: Wed, 30 Nov 2022 15:39:13 GMT
server: Apache
X-Firefox-Spdy: h2
108.179.192.107
130.193.44.97
23.36.77.32
92.223.124.24
31.13.72.36
93.184.220.29
0.0.0.0