r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7664
Expires: Sat, 03 Dec 2022 01:06:34 GMT
Date: Fri, 02 Dec 2022 22:58:50 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 7439fb99a444b66db1e68ffbfaa38451
4b7742d7956485906f1c392c478515ff89a46184
636327ce88f733e5a1d39af212f97242717a39ce20edaef330fafea238e3a309
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2212
Cache-Control: max-age=130157
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 22:58:50 GMT
Etag: "6389d3f3-1d7"
Expires: Sun, 04 Dec 2022 11:08:07 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:15 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 22:18:13 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2437
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19496
Expires: Sat, 03 Dec 2022 04:23:46 GMT
Date: Fri, 02 Dec 2022 22:58:50 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 04dryIlS/RZM0jc61GgzLnDAmxWEkvZyPcO9i+PqJZ5ai023fxvnAHcuMlP6Gcsi87uKNcBgLAc=
x-amz-request-id: 1EDW46E256VAX31D
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 22:46:52 GMT
age: 718
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 22:58:50 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 22:11:16 GMT
cache-control: public,max-age=3600
age: 2854
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
pensionatoparis.com.br/login/index.php
301 Moved Permanently 0 B URL HTTP/1.1 pensionatoparis.com.br/login/index.php
IP
ASN #53057 RedeHost Internet Ltda.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert phishtank Other
fortinet Phishing
GET /login/index.php HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Dec 2022 22:58:50 GMT
Server: Apache
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: http://pensionatoparis.com.br/login/
Control-Cache: max-age=0, no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT, Wed, 11 Jan 1984 05:00:00 GMT
Content-Length: 0
Keep-Alive: timeout=5, max=100
Content-Type: text/html; charset=UTF-8
ocsp.digicert.com/
200 OK 471 B IP
Hash 7f1f8fc556d1f7e0aea3e1208ee2fd1c
09c341a56ff876479cfc8a0505a5fef4a5d110f1
65adcf58887bcc23f73379f74ab19a61cfbb93285c95c64b44a6716eeacc1482
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2206
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 22:58:50 GMT
Last-Modified: Fri, 02 Dec 2022 22:22:04 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
pensionatoparis.com.br/login/
302 Found 0 B URL HTTP/1.1 pensionatoparis.com.br/login/
IP
ASN #53057 RedeHost Internet Ltda.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /login/ HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Fri, 02 Dec 2022 22:58:50 GMT
Server: Apache
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://pensionatoparis.com.br/index.php/wp-json/>; rel="https://api.w.org/"
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://pensionatoparis.com.br/wp-login.php
Control-Cache: max-age=0, no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT, Wed, 11 Jan 1984 05:00:00 GMT
Content-Length: 0
Keep-Alive: timeout=5, max=100
Content-Type: text/html; charset=UTF-8
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 56bsDy5lT6DhF1uhrTycRA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: yMOgln7OGn7NbTGyj7yMgpGXlKg=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 77ff7e95b5f0cec69d7f36d4b2b98458
1d5a459b10762bd786ec72879ee08566c6d273c9
d3b63bc3d2bce19b025c1e711fcf952f080b549aad6c1648bddef0ddabb1e5d6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3B63BC3D2BCE19B025C1E711FCF952F080B549AAD6C1648BDDEF0DDABB1E5D6"
Last-Modified: Fri, 02 Dec 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21596
Expires: Sat, 03 Dec 2022 04:58:47 GMT
Date: Fri, 02 Dec 2022 22:58:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4976
Expires: Sat, 03 Dec 2022 00:21:48 GMT
Date: Fri, 02 Dec 2022 22:58:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4976
Expires: Sat, 03 Dec 2022 00:21:48 GMT
Date: Fri, 02 Dec 2022 22:58:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4976
Expires: Sat, 03 Dec 2022 00:21:48 GMT
Date: Fri, 02 Dec 2022 22:58:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4976
Expires: Sat, 03 Dec 2022 00:21:48 GMT
Date: Fri, 02 Dec 2022 22:58:52 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: ad2d9243-5e32-4faf-8ff3-b9abd3af1e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1_hEJJIAMF4Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387d063-596f5833509112ee6cbedf54;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:51:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PIC-TIeTFK_Y2AiqowYT4_8tMuzIKO23lAwx18fYepTf4PIWkmLqkQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 05:20:15 GMT
age: 63517
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd79a3383-273b-420b-975f-73400e86239a.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd79a3383-273b-420b-975f-73400e86239a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f7c90eda6b69179422ecd1245e94162c
d5e0aef84626250a62cc94a781a47e08aaac3f6a
5fd1c9586a82c9e6a9a8b5d99b746f17e9485f80057ec35c3f8d5ab5256fbb16
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd79a3383-273b-420b-975f-73400e86239a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8273
x-amzn-requestid: 6abe0e18-1b39-4a87-8f15-6ea75d99b658
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZosHLDIAMFyoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6fd1-455200672a96e0f5605a339f;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:36:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ioHzlpBY23kgiXqulSrUfZ5srlNyQIqGQQ5nvSzCJWkx35fGrIJPZA==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:51:40 GMT
age: 4032
etag: "d5e0aef84626250a62cc94a781a47e08aaac3f6a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e765102-d7b9-4765-a166-db04ae6113bc.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e765102-d7b9-4765-a166-db04ae6113bc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcdb77a21f91a4a280ac9a8efbc48bbd
74c974eaf1cbdf6c5ae11793e42caf4c4e4cb25d
5ee7c45f21b38c653d03a24b10a190a9e9266226d221b006e787cd3719088d7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e765102-d7b9-4765-a166-db04ae6113bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11233
x-amzn-requestid: 04a762c8-8d2a-405a-a2e2-386a4da3c57f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZxHZEJXoAMFzqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386fbc8-174cbfee1ea6b7093fc18c58;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 06:44:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3tSASLdggPnNrG2bqgvMF5fbE-EoamXkl6kX-kLSPkJwmIdQ6NMsJQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:53:20 GMT
age: 3932
etag: "74c974eaf1cbdf6c5ae11793e42caf4c4e4cb25d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e545217-31b4-442a-abef-bcaaffcd0407.png
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e545217-31b4-442a-abef-bcaaffcd0407.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 249aec334460c66dc88b9e8def4e48df
f86d1d278ba5b24587b10519b1b30d75044efd97
b083151804ced0533a5b33302ef110b50ddc4bf653de0fb8f6c7711f4bc29fe2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e545217-31b4-442a-abef-bcaaffcd0407.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9449
x-amzn-requestid: c21c52f9-d971-46d9-b632-0439a0e23da4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZkxHKbIAMFxkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6fb7-2b8cc0982af568626f4a4bbf;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:35:51 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: h_QxhlhIxUS0VSjt1z50xNf0u1eB6c1WPTJUfvwGQA-t4M0zmXo2AA==
via: 1.1 b838ef1ff22a4a994af82d5178c30e1c.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 22:03:42 GMT
etag: "f86d1d278ba5b24587b10519b1b30d75044efd97"
content-type: image/jpeg
age: 3310
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8498f68-55a6-46be-9eb1-671b7a90a148.jpeg
200 OK 3.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8498f68-55a6-46be-9eb1-671b7a90a148.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ce5811e1c83156e6a6d4557c33faafe5
ba23b3c6adc42832ccd60941123d78dab3e435d5
a9394a4f8f80733a19fb03bc3ad216f4e15c9ba7110e2e181272304ea2f3f2df
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8498f68-55a6-46be-9eb1-671b7a90a148.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3321
x-amzn-requestid: b418b18c-969e-4525-8263-0c910593f7fa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZN2HJaoAMFQ2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f25-5196fa3028f5fb80160617af;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MWBXvM2iS-PFfaBrG8uteifjCljCO_DnjEmXodiSvwN2Es_YkBWDLQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:37:47 GMT
age: 4865
etag: "ba23b3c6adc42832ccd60941123d78dab3e435d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7216286-96f7-46a8-9738-52007e2fafb6.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7216286-96f7-46a8-9738-52007e2fafb6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ac15b0561874b0e98a14d037e06dc444
38197764b12e149806126e8a187b0571630d5b26
b4e8ca67dc3e119e2a41d1a362641a1354d5ef68ad18eaa4383e82d38d3c0399
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7216286-96f7-46a8-9738-52007e2fafb6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8169
x-amzn-requestid: a3054dff-b0dd-43cb-ade7-7ec1df6e672f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZPWH4DoAMF5Qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f2e-788f6fdd1a5e024259e58d80;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:34 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 56bQRYbHZJbthXKRpMuKIKkPOxTwDxReBCStAwfkSmc3afFvCcdGdg==
via: 1.1 aabd01c4a20dae837d162bd972422efc.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:43:32 GMT
age: 4520
etag: "38197764b12e149806126e8a187b0571630d5b26"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-login.php
200 OK 2.9 kB URL HTTP/2 pensionatoparis.com.br/wp-login.php
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (558)
Hash 251aa9e940a59862475f9fe7ba86b30b
faae4a19dfbd7c58f4b191a8120d3f14b769644e
aa6d7e4795a3ad34863c43dd8e96c87d5a8e4645d72205d2b7c239d90c4390b5
Analyzer Verdict Alert fortinet Phishing
GET /wp-login.php HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: no-cache, must-revalidate, max-age=0
x-frame-options: SAMEORIGIN
set-cookie: wordpress_test_cookie=WP+Cookie+check; path=/; secure
vary: Accept-Encoding
content-encoding: gzip
control-cache: max-age=0, no-cache, no-store, must-revalidate
pragma: no-cache
expires: Wed, 11 Jan 1984 05:00:00 GMT, Wed, 11 Jan 1984 05:00:00 GMT
content-length: 2915
content-type: text/html; charset=UTF-8
date: Fri, 02 Dec 2022 22:58:51 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-includes/js/zxcvbn-async.min.js?ver=1.0
200 OK 256 B URL HTTP/2 pensionatoparis.com.br/wp-includes/js/zxcvbn-async.min.js?ver=1.0
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (316)
Hash 0f489595323807d5ba17b35e2a404142
5a4f9c8416f5989fb9394ee59d818a8f3d20bdfe
50581316aa4c1054f4e404bb8c19b99cc8c040af3d0e6f82a313445edf188e01
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/zxcvbn-async.min.js?ver=1.0 HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pensionatoparis.com.br/wp-login.php
Connection: keep-alive
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 26 Sep 2022 14:34:00 GMT
etag: "15f-5e9956b273034-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 256
content-type: application/javascript
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-includes/css/buttons.min.css?ver=6.1.1
200 OK 1.4 kB URL HTTP/2 pensionatoparis.com.br/wp-includes/css/buttons.min.css?ver=6.1.1
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (5819)
Hash 2406489e9a69a6219f102656de34fcd4
d7b31e78797a4e29fad8f1a484a806bc6d04b135
2c99cc5c4bf7babb480fe5ec319a912f7a8e99ec72485591b5b129dd88d2c320
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/buttons.min.css?ver=6.1.1 HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pensionatoparis.com.br/wp-login.php
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 26 Sep 2022 14:33:59 GMT
etag: "16de-5e9956b12ae34-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 1444
content-type: text/css
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.5 kB URL HTTP/2 pensionatoparis.com.br/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (6475), with no line terminators
Hash 1e46679e1bc98222506000ae5925cd4a
05919d105563cd99b083559f18d6f4ff5cddff94
369f40e2660ba1ae2df0312327331b0ba76f9d611cf5a356291341fa159f866c
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pensionatoparis.com.br/wp-login.php
Connection: keep-alive
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 26 Sep 2022 14:34:00 GMT
etag: "194b-5e9956b246d2c-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 2456
content-type: application/javascript
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-admin/css/l10n.min.css?ver=6.1.1
200 OK 681 B URL HTTP/2 pensionatoparis.com.br/wp-admin/css/l10n.min.css?ver=6.1.1
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (2442)
Hash d143324d962ecd785018e3be5009e10e
584dbcf456ff6c52e302c9e34c9555055bb76d9f
1015f22f607d378f8e49b556a565b5bc8f8e007fb2cd396a854eb319bc214cfe
Analyzer Verdict Alert fortinet Phishing
GET /wp-admin/css/l10n.min.css?ver=6.1.1 HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pensionatoparis.com.br/wp-login.php
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 26 Sep 2022 14:33:59 GMT
etag: "9ad-5e9956b0fa0f4-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 681
content-type: text/css
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.2 kB URL HTTP/2 pensionatoparis.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (11126)
Hash 2fe098cbdfcb2c171cd6e4fc7eb595c5
8e1bf93a92cd550526d91c1321711700f0978078
7d6f6e40a91e440cf57e67f4e03a6a5d5ba4549e35117d31f0497eeadfce9d5c
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pensionatoparis.com.br/wp-login.php
Connection: keep-alive
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 26 Sep 2022 14:34:00 GMT
etag: "2bd8-5e9956b2714dc-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 4165
content-type: application/javascript
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 6.5 kB URL HTTP/2 pensionatoparis.com.br/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #53057 RedeHost Internet Ltda.
File type Unicode text, UTF-8 text, with very long lines (17819), with no line terminators
Hash 1f49fbbfd06b1cf2737bef381a3b8d6b
5857027c09f650a11aef66238c5ef9a6ae04e770
50aada6c9cc70ab8626246cc2596e3a88dba1c83f8df5f39b59ee56654203f72
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pensionatoparis.com.br/wp-login.php
Connection: keep-alive
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 03:38:32 GMT
etag: "459f-5ec74931fe9a3-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 6509
content-type: application/javascript
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 31 kB URL HTTP/2 pensionatoparis.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (65447)
Hash 3817814ad6a4b5ab0fbb9e3e775ea7ea
d435e871daaa241a0853a698a982f71f773aad18
539a5a5edf8c79df18435775d2a17895fda4d439114e46254282e4e89fcf4686
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pensionatoparis.com.br/wp-login.php
Connection: keep-alive
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 03:38:32 GMT
etag: "15e54-5ec74932ae23b-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 30917
content-type: application/javascript
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-admin/css/login.min.css?ver=6.1.1
200 OK 2.2 kB URL HTTP/2 pensionatoparis.com.br/wp-admin/css/login.min.css?ver=6.1.1
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (6280)
Hash 8c8649118625e142e9bd071788309e78
2c19d2b8458bff90f6091624ef30ab779c809f31
88e04bf63531ffb33b81e22bc4105a468f691a12c5a9ae3101c4127a8ec9c954
Analyzer Verdict Alert fortinet Phishing
GET /wp-admin/css/login.min.css?ver=6.1.1 HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pensionatoparis.com.br/wp-login.php
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 26 Sep 2022 14:33:59 GMT
etag: "18ab-5e9956b0fa8c4-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 2157
content-type: text/css
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-admin/css/forms.min.css?ver=6.1.1
200 OK 6.3 kB URL HTTP/2 pensionatoparis.com.br/wp-admin/css/forms.min.css?ver=6.1.1
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (26198)
Hash c83c53c5b3beaee684f2d0ed0adb9dab
d4e46f463879340cd9f7015e8f7f647ce3f57001
5d8fe30936af3e991c3bf5a3763e6a1d05b060267423cdc999d965d1e19a4af2
Analyzer Verdict Alert fortinet Phishing
GET /wp-admin/css/forms.min.css?ver=6.1.1 HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pensionatoparis.com.br/wp-login.php
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 03:38:29 GMT
etag: "6679-5ec7492f4ce7b-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 6331
content-type: text/css
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-includes/js/wp-util.min.js?ver=6.1.1
200 OK 756 B URL HTTP/2 pensionatoparis.com.br/wp-includes/js/wp-util.min.js?ver=6.1.1
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (1391)
Hash 838aa5f64f258023c2f4ced3125cc12e
0f9ba4eee7038506d01a6e741b16324ffb347fda
8212000a2ae7888dec134e6a079a16c19d71f6bcd0924384abb16027325ed218
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-util.min.js?ver=6.1.1 HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pensionatoparis.com.br/wp-login.php
Connection: keep-alive
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 03:38:33 GMT
etag: "592-5ec74932d2073-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 756
content-type: application/javascript
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-includes/js/underscore.min.js?ver=1.13.4
200 OK 7.3 kB URL HTTP/2 pensionatoparis.com.br/wp-includes/js/underscore.min.js?ver=1.13.4
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (18798)
Hash 5094c566b273fbae4cdf494b57a6399a
8e6c15fc2d1c74c52d4dbf4ff0560695a26cd100
028b51837f76e8bd0f3d21334ff355a5ff6488c350aeb15e98aff20776d97462
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pensionatoparis.com.br/wp-login.php
Connection: keep-alive
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 03:38:33 GMT
etag: "4991-5ec74932d14bb-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 7294
content-type: application/javascript
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-admin/js/user-profile.min.js?ver=6.1.1
200 OK 2.3 kB URL HTTP/2 pensionatoparis.com.br/wp-admin/js/user-profile.min.js?ver=6.1.1
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (6152)
Hash 9083869b8582e6c2df248b14bbe79aaa
be8a8b01ac3e1fed56bee35de35e8afc8bfc7549
361b3cc288fc2f238d6ee9d0339ca1be4e665f3dca597673f0e130f4cbda7456
Analyzer Verdict Alert fortinet Phishing
GET /wp-admin/js/user-profile.min.js?ver=6.1.1 HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pensionatoparis.com.br/wp-login.php
Connection: keep-alive
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 26 Sep 2022 14:33:59 GMT
etag: "182b-5e9956b101df4-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 2324
content-type: application/javascript
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-admin/js/password-strength-meter.min.js?ver=6.1.1
200 OK 621 B URL HTTP/2 pensionatoparis.com.br/wp-admin/js/password-strength-meter.min.js?ver=6.1.1
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (1088)
Hash 243a527952a51e0ad1b71c209354dcac
e0dfbe52819bd3e79da04c123a16f70dea11c178
752163b0f73ae92e7ab811e2a74ddc5284ef73287466b9db793fa0e53a7742fd
GET /wp-admin/js/password-strength-meter.min.js?ver=6.1.1 HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pensionatoparis.com.br/wp-login.php
Connection: keep-alive
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 26 Sep 2022 14:33:59 GMT
etag: "463-5e9956b0fef14-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 621
content-type: application/javascript
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5
200 OK 1.7 kB URL HTTP/2 pensionatoparis.com.br/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (4875)
Hash 320b86bb1a9ce650a5e3553b2bb1c430
c56e8668b398641ed5cdcfbd8a8eba7d631cdb9c
c9ebbb8d122c6be3880d18172abfe308bb07db900689484fa765a73b8b20b3ec
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pensionatoparis.com.br/wp-login.php
Connection: keep-alive
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 26 Sep 2022 14:34:00 GMT
etag: "132e-5e9956b248c6c-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 1661
content-type: application/javascript
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae
200 OK 3.9 kB URL HTTP/2 pensionatoparis.com.br/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae
IP
ASN #53057 RedeHost Internet Ltda.
Hash 558cf96d041149e01fad21bb232b7450
d427aee58e920fbd93eb70e89e4f2464178146bf
10958832d78cee8afba9dbdf1def07835eee593f6b3c0dc568ee5e4e7dcd6fed
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pensionatoparis.com.br/wp-login.php
Connection: keep-alive
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 03:38:32 GMT
etag: "27f6-5ec7493255073-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 3861
content-type: application/javascript
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-includes/css/dashicons.min.css?ver=6.1.1
200 OK 36 kB URL HTTP/2 pensionatoparis.com.br/wp-includes/css/dashicons.min.css?ver=6.1.1
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (60502)
Hash 07a1d63569e1b6c4785a6903680f808f
1fc909c54a0affb8221c69a1c55e85768ee25230
1992d00a58c737abc9676bdb8a3bf633fd773f2bb343733b8855f359d36b8118
GET /wp-includes/css/dashicons.min.css?ver=6.1.1 HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pensionatoparis.com.br/wp-login.php
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 26 Sep 2022 14:33:59 GMT
etag: "e688-5e9956b12ae34-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:52 GMT
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Fri, 02 Dec 2022 22:58:52 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-content/uploads/2021/01/cropped-logo-pensionato-paris21-192x192.png
200 OK 17 kB URL HTTP/2 pensionatoparis.com.br/wp-content/uploads/2021/01/cropped-logo-pensionato-paris21-192x192.png
IP
ASN #53057 RedeHost Internet Ltda.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash e6383c5a12a896907b4ba819466ba17e
913ce14efcd8bec6616e497b24075a3518d6e209
5e641f5ccb8ac34c896a85e58e83f987e19fc635d26ed42d7dd4fcfe21298304
GET /wp-content/uploads/2021/01/cropped-logo-pensionato-paris21-192x192.png HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pensionatoparis.com.br/wp-login.php
Connection: keep-alive
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 14 Oct 2022 17:28:56 GMT
etag: "426d-5eb01f5e37d21-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:53 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 16902
content-type: image/png
date: Fri, 02 Dec 2022 22:58:53 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-content/uploads/2021/01/cropped-logo-pensionato-paris21-32x32.png
200 OK 1.7 kB URL HTTP/2 pensionatoparis.com.br/wp-content/uploads/2021/01/cropped-logo-pensionato-paris21-32x32.png
IP
ASN #53057 RedeHost Internet Ltda.
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash d625f647c7f1e458221e29c0acb84bec
3ebb3090ade1f32617d0514a223ac5dcd43eae74
8135503b8ecd1b6649f86aac6c692c772f1cb940ba93bbd4467125e7fffbb6a0
GET /wp-content/uploads/2021/01/cropped-logo-pensionato-paris21-32x32.png HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pensionatoparis.com.br/wp-login.php
Connection: keep-alive
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 14 Oct 2022 17:28:56 GMT
etag: "6a9-5eb01f5e41191-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:53 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 1720
content-type: image/png
date: Fri, 02 Dec 2022 22:58:53 GMT
server: Apache
X-Firefox-Spdy: h2
pensionatoparis.com.br/wp-includes/js/zxcvbn.min.js
200 OK 0 B URL HTTP/2 pensionatoparis.com.br/wp-includes/js/zxcvbn.min.js
IP
ASN #53057 RedeHost Internet Ltda.
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/zxcvbn.min.js HTTP/1.1
Host: pensionatoparis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pensionatoparis.com.br/wp-login.php
Connection: keep-alive
Cookie: wordpress_test_cookie=WP+Cookie+check
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 26 Sep 2022 14:34:00 GMT
etag: "c8bdd-5e9956b273034-gzip"
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 03 Dec 2022 22:58:53 GMT
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Fri, 02 Dec 2022 22:58:53 GMT
server: Apache
X-Firefox-Spdy: h2
177.55.123.202
34.160.144.191
23.33.119.27
93.184.220.29