r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7475
Expires: Mon, 30 Jan 2023 12:43:49 GMT
Date: Mon, 30 Jan 2023 10:39:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5270
Expires: Mon, 30 Jan 2023 12:07:04 GMT
Date: Mon, 30 Jan 2023 10:39:14 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 10:35:42 GMT
content-type: application/json
age: 212
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 09ee4b0fe6cf4ca5ed31b24452338d00
7e62b6e20f0d4737f4a8d94f9818a0883027839e
56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2566
Expires: Mon, 30 Jan 2023 11:22:00 GMT
Date: Mon, 30 Jan 2023 10:39:14 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TSsDgk8FJheRWXYpYrl3gW4iuLicP4rw0PqvhkhOGvgsct2Ih2IrCI8ufVNSbOSR7Ovuc7kyX2c=
x-amz-request-id: MA7GEWW237ZG7X1W
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 09:50:41 GMT
age: 2913
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 10:39:14 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 09:41:41 GMT
age: 3453
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2502
Expires: Mon, 30 Jan 2023 11:20:56 GMT
Date: Mon, 30 Jan 2023 10:39:14 GMT
Connection: keep-alive
ccrsolar.com.br/wp-content/SUPPORT/css/33986123.css
188.114.96.1200 OK 55 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/css/33986123.css
IP 188.114.96.1:0
File type ASCII text, with very long lines (62121), with CR, LF line terminators
Hash 9b647eaca582708cc38f47fcbc69242f
b74cc5ba73c10f30eb0c3fa9e195093c16139f76
0680e2ccd7f421c70b1b77c99320a983931ec3f97d01a3f85349db860afe1eb1
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
GET /wp-content/SUPPORT/css/33986123.css HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 10:39:14 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:14:58 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iFpzihXeD5mxTPIaBUgLFFR%2BpN9gZbCPaAvgQh2%2FUG3F9zyraLR3eaRT3dtwvv5WjseqyvZkGFwsKc6hdHB8RQOedUaJj%2BhApCyKzCNmyhuae50pJjC9l6H5OlQKULM%2FFr8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791995245ed4b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 76e9128d82e006b6a3d50252e825ecd9
71ddeaf1807213437596a0d5e34fecc2d9b0c0ed
43754aa3349cbe5294600266c40c3cf1e2faf05db2762f394e99d8423475612c
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "43754AA3349CBE5294600266C40C3CF1E2FAF05DB2762F394E99D8423475612C"
Last-Modified: Sun, 29 Jan 2023 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=686
Expires: Mon, 30 Jan 2023 10:50:41 GMT
Date: Mon, 30 Jan 2023 10:39:15 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 76e9128d82e006b6a3d50252e825ecd9
71ddeaf1807213437596a0d5e34fecc2d9b0c0ed
43754aa3349cbe5294600266c40c3cf1e2faf05db2762f394e99d8423475612c
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "43754AA3349CBE5294600266C40C3CF1E2FAF05DB2762F394E99D8423475612C"
Last-Modified: Sun, 29 Jan 2023 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=675
Expires: Mon, 30 Jan 2023 10:50:30 GMT
Date: Mon, 30 Jan 2023 10:39:15 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 76e9128d82e006b6a3d50252e825ecd9
71ddeaf1807213437596a0d5e34fecc2d9b0c0ed
43754aa3349cbe5294600266c40c3cf1e2faf05db2762f394e99d8423475612c
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "43754AA3349CBE5294600266C40C3CF1E2FAF05DB2762F394E99D8423475612C"
Last-Modified: Sun, 29 Jan 2023 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=675
Expires: Mon, 30 Jan 2023 10:50:30 GMT
Date: Mon, 30 Jan 2023 10:39:15 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 76e9128d82e006b6a3d50252e825ecd9
71ddeaf1807213437596a0d5e34fecc2d9b0c0ed
43754aa3349cbe5294600266c40c3cf1e2faf05db2762f394e99d8423475612c
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "43754AA3349CBE5294600266C40C3CF1E2FAF05DB2762F394E99D8423475612C"
Last-Modified: Sun, 29 Jan 2023 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=686
Expires: Mon, 30 Jan 2023 10:50:41 GMT
Date: Mon, 30 Jan 2023 10:39:15 GMT
Connection: keep-alive
www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-offers-ME_Batch1_Gen_L1_Tile_243x105.webp
192.229.233.230200 OK 728 B URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-offers-ME_Batch1_Gen_L1_Tile_243x105.webp
IP 192.229.233.230:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 243x105, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash df9f3bf8aa5865301323a569fe62fbe7
93bb04e936f1a56defb6e7bc88e08d24815f5f39
5314ce08621ae1844b4ef0c672d68effcb3ade4009909fdf835c97166fda7500
GET /homepage/spa-assets/images/assets-images-site-hp-assets-offers-ME_Batch1_Gen_L1_Tile_243x105.webp HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
age: 305246
cache-control: max-age=26920000, public
content-type: application/octet-stream
date: Mon, 30 Jan 2023 10:39:15 GMT
etag: "2d8-55f85f12b7740"
expires: Mon, 30 Jan 2023 10:39:16 GMT
last-modified: Mon, 04 Dec 2017 16:09:25 GMT
server: ECS (ska/F710)
strict-transport-security: max-age=31536000
x-boa-requestid: Y9L19VrMJk0N0a32DBldLAAAADY
x-cache: HIT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 728
X-Firefox-Spdy: h2
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 76e9128d82e006b6a3d50252e825ecd9
71ddeaf1807213437596a0d5e34fecc2d9b0c0ed
43754aa3349cbe5294600266c40c3cf1e2faf05db2762f394e99d8423475612c
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "43754AA3349CBE5294600266C40C3CF1E2FAF05DB2762F394E99D8423475612C"
Last-Modified: Sun, 29 Jan 2023 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=675
Expires: Mon, 30 Jan 2023 10:50:30 GMT
Date: Mon, 30 Jan 2023 10:39:15 GMT
Connection: keep-alive
push.services.mozilla.com/
54.149.71.248101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.149.71.248:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0RG0Dqqu9toMrHw1tYLp2g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zs5FDzxpwDy4vKCo75aoKyhaEhY=
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_icon-CSXbef49635.svg
188.114.96.1200 OK 14 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_icon-CSXbef49635.svg
IP 188.114.96.1:0
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash cb01b9971078a94c001a5e8d8efd0663
3719795367f485a55df99cfd8120f61d2fe2b2f1
cf3476b27209533771c12174c74cec55dfaff56df302afb681553c1a4aebeb4b
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_icon-CSXbef49635.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 10:39:15 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EWsz%2B2a2SeMW1nCmvi5XeoRR1KFPxLpaQQ97zDJvj9duqk7KDR4t897VvF4NAjOuz4I7VYsfHUssX7QWwQZFoaH6nFIDXIXFcFIEiyeLsP44HdIZ7wQu%2FH3X%2Bx%2BYECybp8c%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79199526aa5eb505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-global-get-app-modal-Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917-CSXd8fd3663.svg
188.114.96.1200 OK 2.9 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-global-get-app-modal-Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917-CSXd8fd3663.svg
IP 188.114.96.1:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7318), with no line terminators
Hash 78c040fb1acb8a6a6a8e13251ec756b7
6f29f7bcc9e41824057afb2c0cd700008dee69b5
256940f26abbdbbb5f77a557f6c8ff978be8ef2dcbf081d2534462c8d4358ce4
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-global-get-app-modal-Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917-CSXd8fd3663.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 10:39:15 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hwJRG%2Fr8qTyi0RoTLyx%2F5ln5CHa3weyNkuQnorXtZ51p6Dg7uyQvKqaYGzIVFlDsk2%2FIBMuT6MxLoWQ%2Bv04GFfUTmivVnhG82rX8nJhd3SbmbXUepIU%2BeY1jwcF%2Bj4%2BrNVk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79199526ab89b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-global-logos-bac-logo-v2-CSX3648cbbb.svg
188.114.96.1200 OK 1.6 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-global-logos-bac-logo-v2-CSX3648cbbb.svg
IP 188.114.96.1:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 957e65c1cb1404b6626b248c250c2dcf
b9cca4ff830bced147b46d4a00be8b313ce8ebfc
ff7558a49769db1e02804c53c8bb12cadb86ad404ac851f2e371acd491bb2d1c
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-global-logos-bac-logo-v2-CSX3648cbbb.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 10:39:15 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cuZnro2na9rJiL6VFY55n9Gqzd2k60ILtpI2A7H%2FBecmJm1AcgbmKB8CBPsWvYH0RSXolNbLQGcv5rG2OqmOFuvVILPGxMo%2BiKXtnn0Bep5%2Fy0mE0A%2FGkNbjYyd%2BOXdpB%2Bc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79199526ad72fabc-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-global-get-app-modal-google-play-badge-CSX89f9024.svg
188.114.96.1200 OK 1.8 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-global-get-app-modal-google-play-badge-CSX89f9024.svg
IP 188.114.96.1:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4993), with no line terminators
Hash 270d5cdc4e024caf808d623896f7f309
bceec16ecd0ea74d04d5c3c7792c54a5bd9f18da
4f3644555d5f7171a16de260986da3253db12b28823fa782190f76b0227b547f
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-global-get-app-modal-google-play-badge-CSX89f9024.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 10:39:15 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E%2FQ3rs3LXcueZJHK1aKVp6bbT4j5AgdffZfA%2FbIpFaFm3Bx9q3FpvqS4yyFy66hy41KKZ466e7PKLESAeZ2ziw9xng9tDmU%2BTHJCtVkj7eksjH2eOGjp5DxPuQ8d5335nTU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79199526a957b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-icons-calendar-CSXef62d939.svg
188.114.96.1200 OK 581 B URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-icons-calendar-CSXef62d939.svg
IP 188.114.96.1:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1191), with no line terminators
Hash a43589c7d1164b1cf7591dd5a01102b7
a41f65df9d9100b12b72e6ea226846d4fc44e417
148c8303d820c5766bf2f00feac56773b394a9b8cb9ee2ac1344bbce65f0e2e6
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-site-homepage-icons-calendar-CSXef62d939.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 10:39:15 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GZHmYvLDPsZnMhVmjvmrOBi1%2BJ75ok925lysAAdJAufXM70BGcaRA%2BmESAEN5G0kiDLBYC4qh2ha3UPWiCSZProSu2XzInCsE3xbcB%2FzVkb4AWSd2%2BocITCtTGdKLf%2BooXU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79199526a9211c12-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ
188.114.96.1200 OK 88 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (63839)
Hash 2eec6692b0a6405b64a21d944d5237d7
8a16a3da7609089554182e6062564ff7bedabfbb
1b87af654b1781842d120dae926220166ce4b7560aeeee15a1d01faea204bf2b
NIDS Severity Alert suricata medium ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017
GET /wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 10:39:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HogNJn9DiHCDlSUSZ3%2FI0sEeDSpncb0OxMCN7sgbu5QSJ0JXDdnIjX9Dse7VnQdlETX3064SXNWyhsoEq8dJRLM8Y0A34%2FS8KSr0WvjqyZGEKoSWvVuOCauRNL33naQceNI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 791995202e8eb4ee-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-hp-assets-highlights-consumer-other-en-hl_ntb-03_icon_arp7dcrm_e.svg
188.114.96.1200 OK 548 B URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-hp-assets-highlights-consumer-other-en-hl_ntb-03_icon_arp7dcrm_e.svg
IP 188.114.96.1:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (777)
Hash 17936c5d3d0f8035e6b452c5ffc353d3
96d686a6d8ed696f23676f7121c57ba9f7d7fd05
673a4e296673d1a91b593eebde7d3f29e12d00e713fd6962e44624162d46472c
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-site-hp-assets-highlights-consumer-other-en-hl_ntb-03_icon_arp7dcrm_e.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 10:39:15 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 17 Jul 2020 07:27:36 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uUZGJlm6kL1p2PBynaaHRpm%2BrK8Y%2B6J%2BUmhRa2FatT7wzyS2HPUilHXc55P%2BECx%2FepwRP%2BwFi2lL%2BfwtbEVuWQZ5jNIt5Rv8SanXx2z6LQeUDbcufaHYKgwNPlmzlVTXnBU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79199528ce1eb527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_lock-CSX6d401b45.svg
188.114.96.1200 OK 326 B URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_lock-CSX6d401b45.svg
IP 188.114.96.1:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (587), with no line terminators
Hash 1f8dbae85d1e9cf1bde39d6d577ad19b
7ee48d53128e1e1f0782d1268625c93148dc0570
46b2e2943addac2cc6d146e55fd68f12320b78046c370ddd5e79523871e40a07
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_lock-CSX6d401b45.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 10:39:15 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YfWZnuxflEbZTaQkCXvN2LAFJe5K2tLidvz1YYawaE0t8UVRZA9ZDmft4J0Y1YeOlabi4Ox8KCLw6hjQSPEdPB7goHkJR43mmumZWawH6odS9u%2B3gdWGwuL4kspuwr%2F3vGc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79199528cd23b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-pr2_arllmbb5-e.webp
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-pr2_arllmbb5-e.webp
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-pr2_arllmbb5-e.webp HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Mon, 30 Jan 2023 10:39:15 GMT
etag: "16fa-5c016c9cca9c0"
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F708)
set-cookie: TS01794157=01cc89cf203417482eaf5d5f84234c712817dad1be079d0347ba47eb07960d69184898ec9a171083a4aef73edf3b264ed26e4e3a86; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9eeU6MhAqLruJWw5531sAAAAQo
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-logos-new_merrill_desktop_logo-CSX5347e4ce.svg
188.114.96.1200 OK 2.2 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-logos-new_merrill_desktop_logo-CSX5347e4ce.svg
IP 188.114.96.1:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (2727)
Hash 8c1dbf8cd7a5f1c8d1f671cc13edb413
b7de75dd763c92bb982d580798033431ec036409
d555c8c204cc633956ff5d338aa3d7ab7a583b911de7addc4a9d4a12bcab7c97
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-site-homepage-logos-new_merrill_desktop_logo-CSX5347e4ce.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 10:39:15 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:24 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WANUiOlH2TrgnygsIP8b%2BEQRG1gvJeYth12SRcrnjs8Ku8iRAhjr8NiPDEYkTIMM0HZwrpNh0GTaZSNbdE3B4bHq0fDcSvkrr5gtlGeoVsCF3m7BNuh2oViX45LvcI85UrM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79199528bd9fb505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-sign-in-module-hp-url-example-CSX3e076ebf.png
188.114.96.1200 OK 4.1 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-sign-in-module-hp-url-example-CSX3e076ebf.png
IP 188.114.96.1:0
File type PNG image data, 522 x 31, 8-bit/color RGB, non-interlaced\012- data
Hash 8e1041b5b2d8242c565725caf3adc033
96d3d32bc0b0f07acd69046e655ceeb05c5444ea
6d7ac293ab6a5f1f5bddc8d4e59602950fbfa5434d1b50e1a840eab9dd6b4b7c
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
GET /wp-content/SUPPORT/images/assets-images-site-homepage-sign-in-module-hp-url-example-CSX3e076ebf.png HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 10:39:15 GMT
Content-Type: image/png
Content-Length: 4102
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:24 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ypgafaY%2BDhyrNNPMkcG6fCw9ROz8f%2BKmjFu%2Beto%2FqNSx7jb42CinKz1pHkg4MwbIREzYc7eMCwsS1qMqFNWGxjy5TQKLWZ%2FfGPKc13yUjbLFNfRMYuLB3MY%2FPTvpbuSiZ1k%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79199528cb0c1c12-OSL
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/jdpower.png
188.114.96.1200 OK 20 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/jdpower.png
IP 188.114.96.1:0
File type PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced\012- data
Hash 9dc77c0ad5d86af8bc0ce8534df119f9
8f613dafde65e48b79f591abb9cd17f3674488b4
63b36fc2d96a85f37d1b05907fc5274ffc0a4c43224abd457d74ec847d6208e6
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
GET /wp-content/SUPPORT/images/jdpower.png HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 10:39:15 GMT
Content-Type: image/png
Content-Length: 19535
Connection: keep-alive
Last-Modified: Fri, 17 Jul 2020 07:25:56 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AiIN%2FaXTHuGdBnax%2FGRD9L7HCqyZWh7tHvvJUxhUp5ceQzPu11Z2h2Tu%2BDmhpxznMtqgoCD47HZaRzRW23eK7ZmOpUQ%2BjjenSZ9jaxHckMZ0cNkE%2BmN4PucHloEs0CTeMvE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79199528e9b9b4ee-OSL
alt-svc: h2=":443"; ma=60
www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-nr2_arllmbb5-e.webp
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-nr2_arllmbb5-e.webp
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-nr2_arllmbb5-e.webp HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Mon, 30 Jan 2023 10:39:15 GMT
etag: "16fa-5c016c9cca9c0"
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F71D)
set-cookie: TS01794157=01a461ada890fae9c270628ad31791c55926151942dfe829d3c94b73d355d1f6fc08186d1b83be33b715cce7f4af37d2ed5a3ae4ba; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9eeUzR9SaaGBbD79Y5yRwAAAPA
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-cr2_arllmbb5-e.webp
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-cr2_arllmbb5-e.webp
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-cr2_arllmbb5-e.webp HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Mon, 30 Jan 2023 10:39:15 GMT
etag: "16fa-5c016c9cca9c0"
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F70B)
set-cookie: TS01794157=01a461ada8b4feef5c4dd62fe30032477a13ba27bfe796cf2b535cfea812942f70d38b59526b976698034ad5db4d92618e2b60ee35; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9eeU4iE2-WbXxu3iudDwAAAAQk
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff2
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff2
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff2 HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Mon, 30 Jan 2023 10:39:15 GMT
etag: "16fa-5c016c9cca9c0"
expires: Tue, 30 Jan 2024 10:39:15 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F6FC)
set-cookie: TS01794157=01b13351543a89d96f4a7b7939a5842e2cf06170ba74ca85050a8d9f376bdd2bc8f82e4a32e150297771a49d0a84ba1f43a6d6c111; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9eeUzR9SaaGBbD79Y5ySAAAAMQ
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-tr2_arllmbb5-e.webp
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-tr2_arllmbb5-e.webp
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-tr2_arllmbb5-e.webp HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Mon, 30 Jan 2023 10:39:15 GMT
etag: "16fa-5c016c9cca9c0"
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F713)
set-cookie: TS01794157=0170beb9be3ed5d595c3fb06398f94d990ca65b307e077c1485057e0787c6460890a90506a5cfdfbad4ba288c168759075d24fb115; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9eeU3nrsfRSsegNDyMo2wAAAUk
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff2
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff2
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff2 HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Mon, 30 Jan 2023 10:39:15 GMT
etag: "16fa-5c016c9cca9c0"
expires: Tue, 30 Jan 2024 10:39:16 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F713)
set-cookie: TS01794157=0170beb9be4c1bc1d1d9bebc3fc6044b5d3645c755ce3d43a5f187f1b01c1a304d92140bb22f730ff6eb8528ff8ef2fba3b1e87d4f; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9eeU1rMJk0N0a32DBlF0QAAAEY
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff2
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff2
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff2 HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Mon, 30 Jan 2023 10:39:15 GMT
etag: "16fa-5c016c9cca9c0"
expires: Tue, 30 Jan 2024 10:39:16 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F71D)
set-cookie: TS01794157=0126c8e57f679ee88c27eeb3970b332d1db2967ad169bfd0c31af80cdb611117157135cd8c1180d9d5ef8b9b7b99bc360ad29c3ffe; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9eeUx_FL_9eWNt_b1r5OwAAAL0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2292
Expires: Mon, 30 Jan 2023 11:17:28 GMT
Date: Mon, 30 Jan 2023 10:39:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2292
Expires: Mon, 30 Jan 2023 11:17:28 GMT
Date: Mon, 30 Jan 2023 10:39:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2292
Expires: Mon, 30 Jan 2023 11:17:28 GMT
Date: Mon, 30 Jan 2023 10:39:16 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e1c93b4-807b-47ea-82fe-50d8216b163c.jpeg
34.120.237.76200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e1c93b4-807b-47ea-82fe-50d8216b163c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f49153c1aade8aa30bc6c84db4fa09d7
5cce4e085c87e7fbe82907694a36a91cc1bc9bfc
3285916959352e77cdbea34515dad3b3a0315b74bca7f45a8e5a2de4661203e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e1c93b4-807b-47ea-82fe-50d8216b163c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6646
x-amzn-requestid: c8a7d4b9-1a13-41c1-8391-853f03f3150c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fbvRsHiaIAMF4Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d49271-634529cc6844e70829b5750f;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 03:11:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jsqjHdOdOmlotXqpZrEI_u8z7YldTDlDgryiGvDkiYC4HPnK7dlzEA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 03:45:00 GMT
age: 24856
etag: "5cce4e085c87e7fbe82907694a36a91cc1bc9bfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: HvqpQI-tR9W2NwvIgoi8loQaD--rOgVYFdLdkdlaXMhe4ts9mYqahg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:50:16 GMT
age: 46140
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bfbdca6-432c-4f19-887a-3165827e4bc6.jpeg
34.120.237.76200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bfbdca6-432c-4f19-887a-3165827e4bc6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e8d680cbaee5ef3e7b8e09b174ed6ecf
6651a0d3041920798240ea67e827c3d458769fa9
4c74e8ebff95e67da678248d3dc1d3f42d98c8a0d33d54d9d2bde36314c9f952
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bfbdca6-432c-4f19-887a-3165827e4bc6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3678
x-amzn-requestid: 21cd1ae3-b769-418a-b7f8-5efa486db859
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEvE-RIAMFpmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-6998009c289996563d78616a;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XbMeLjDaYoPiw42pUbszzOEqWeUdx01NI6zVLJFgp0r3B_2dHHxX-w==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:11:45 GMT
age: 44851
etag: "6651a0d3041920798240ea67e827c3d458769fa9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb138c2a-a013-4652-92e0-920b0ab6d6fa.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb138c2a-a013-4652-92e0-920b0ab6d6fa.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8fce79ef35b4c943c2b60d5092d17b6f
d29ce982633d0cc50b2a968ea22893d92b9663e3
297e951e4ab09c3465deb222cbe8f66579f9154d4e8806eec3a52350e577fded
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb138c2a-a013-4652-92e0-920b0ab6d6fa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5934
x-amzn-requestid: 75aeb64a-1ba1-4349-84f3-b94aabeccc9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhklyFUMIAMF3nA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7be-56d6fb7b337769986c5c567b;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MFuKQ8m9sOQ2Cc0kXzMaJzUBbB5hEUQ8gpr7rYT4vwh8CYs5oqZQfA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:30:54 GMT
age: 43702
etag: "d29ce982633d0cc50b2a968ea22893d92b9663e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e04b9eaf7449828136ad59e4c9d69f1
b820be4ed885dcf288eb6460c57e1fa7b1c7c476
df75cf7183d401a19655aab025d08ad2c498573c88b32e9b258d951d2993b936
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7679
x-amzn-requestid: 0c7983d5-6040-44e9-b394-21c3784702a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEtEfHoAMFaNA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-54c55dbd09ca642048af8916;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VHh2SQ21xoDoBnGvM2kRiposhXuCE-DdWW1bM35kEykjbHYmhsldVA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:51:22 GMT
age: 46074
etag: "b820be4ed885dcf288eb6460c57e1fa7b1c7c476"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fe31ee140c2fd62e616c8a1edc9e78bb
7aa5fbdc8156514770ae620e81f1afef1c77890f
799af4bf9fa07ed27ebdc9d1a3344ee8a2b6529f076c263495b93290c47a1cc4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8464
x-amzn-requestid: bf2cf356-ebb1-469b-ba35-a79bb009cad6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj3qGeboAMFzNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e697-7c96841f52b6a96d1b0eaf34;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: y6bDvcD7a3-A4DLC3cSdZT-yewV1kkFqcGr7AMuqvUeGA4A0pgF4wQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:59:27 GMT
age: 45589
etag: "7aa5fbdc8156514770ae620e81f1afef1c77890f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ccrsolar.com.br/wp-content/SUPPORT/images/192x192-CSXafb7d716.png
188.114.96.1200 OK 8.4 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/192x192-CSXafb7d716.png
IP 188.114.96.1:0
File type PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced\012- data
Hash 67af3bbd46f9947739538d49395d573d
03a34b0aa432274f88862b27ab109f8e26311e72
b47bfe9d7333188f5b2f8690785ccd966d882c2364a5e4e5ae293e02554ad8d8
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
GET /wp-content/SUPPORT/images/192x192-CSXafb7d716.png HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 10:39:16 GMT
Content-Type: image/png
Content-Length: 8354
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:52:54 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 7121
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vi%2FUTxccX4Ksth4E66SLtStHYC8hITEaFPsj9JduGIWxAkVNaqnvVgeq%2FhJvTOClp1f9HBV6YeyyMVZMf8FekdwB5xh9mC%2BuLDDhuaXcQNSgRwoG1XEe3%2B4LcdecLGT7a9s%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7919952fe857b505-OSL
alt-svc: h2=":443"; ma=60
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Mon, 30 Jan 2023 10:39:16 GMT
etag: "16fa-5c016c9cca9c0"
expires: Tue, 30 Jan 2024 10:39:16 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F71A)
set-cookie: TS01794157=01cc89cf2069148b0bfa62f0d2bf7956d39f657614b3c91e5a9ac1739000888708ad439689d4cfbb512d7bc4415600c60383e9f8c1; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9eeVDy9tkOZiT_NoD-7GAAAANY
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Mon, 30 Jan 2023 10:39:16 GMT
etag: "16fa-5c016c9cca9c0"
expires: Tue, 30 Jan 2024 10:39:16 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F71D)
set-cookie: TS01794157=013d770565cfed5cf89fd48c985ad257f82b4f0bc5ba7044829cbde6663d4488412f2c5948af5c512b6bf8e11ed67ef942b9bcefa4; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9eeVAeZesJdWSGPOWNcNwAAAWQ
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Mon, 30 Jan 2023 10:39:16 GMT
etag: "16fa-5c016c9cca9c0"
expires: Tue, 30 Jan 2024 10:39:16 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F711)
set-cookie: TS01794157=01cc89cf205db2f8662d83aeb7819b6bdd72e43feaa862d76b1d18ccdfd1b684624f736585de95a98b6e1aace04c7b91f4ffc765eb; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9eeVF--3fp_rCpiac9YFAAAAY4
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
ccrsolar.com.br/wp-content/SUPPORT/images/favicon1.ico
188.114.96.1200 OK 2.3 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/favicon1.ico
IP 188.114.96.1:0
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 21b7c547097e81b11e9cb7ba132e187a
5ff4b380cdd2ccd8ca07cdb5205489d91ed5d319
24aa9c686a51cadba99967d1a3826fdaa2c351b593dbc445b8e3c9a7a9241c53
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/favicon1.ico HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=GhHMUUbmtPZpA6am3pBLKw3OCI0jKWGqend8iovMdvbOBmbFMMqwjtlVbmfWiVnxjAGCZbodHA1iXcYJ
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 10:39:16 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:54:10 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kksE5yQu58MQ4jujawZWDI5XQC4ovzlcqrovPTroanl5%2BhvEDqt3d3CYnSvDzNMNq%2FAmROfJ1h56nRe1SI9XTOMB4sLQzSSA14u0NQtRAo26qKE%2BZtugwtZGCUgg9OgQZUI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7919952fe93e1c12-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.ttf
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.ttf
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.ttf HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Mon, 30 Jan 2023 10:39:17 GMT
etag: "16fa-5c016c9cca9c0"
expires: Tue, 30 Jan 2024 10:39:17 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F709)
set-cookie: TS01794157=013d77056550e7d3960f5a3e2ae871531899d21c80596d13824b2f50ea2b2f715fb850898ec4f8459c525b7c107970e6e581c0d3c0; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9eeVcvlcSgW4A7ONfoxIwAAABE
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.ttf
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.ttf
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.ttf HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Mon, 30 Jan 2023 10:39:17 GMT
etag: "16fa-5c016c9cca9c0"
expires: Tue, 30 Jan 2024 10:39:17 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F713)
set-cookie: TS01794157=01c97de39cbdd8a1c3b7a730595ae9f4a509779da1f75758611be3a98adfef219f40ef9eafda12f958ab69eea51e6331194912ef93; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9eeVQzuotfUsOm3UpM7GwAAAMU
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.ttf
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.ttf
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.ttf HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Mon, 30 Jan 2023 10:39:17 GMT
etag: "16fa-5c016c9cca9c0"
expires: Tue, 30 Jan 2024 10:39:17 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F718)
set-cookie: TS01794157=0121c3a38168d28cfcf512658b09c6767b38255816bb699618573fe05e38e9c261907ad1bbb485424c909f15808681014c32adb79b; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9eeVbrBBrwXtLkoYhKKVQAAAKk
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2