r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8f33f56c329fe0b1570d2ee3e000ce4e
b11fcecd7cc1210d3f3b4e1426a37d3cd138119e
ebcb744a032452533c000c0a9f193fd2566b2389729c41b6c5ed69b9e4cd42d4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBCB744A032452533C000C0A9F193FD2566B2389729C41B6C5ED69B9E4CD42D4"
Last-Modified: Tue, 07 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19994
Expires: Thu, 09 Mar 2023 11:14:57 GMT
Date: Thu, 09 Mar 2023 05:41:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 0f2c901fe04f9e3d18e9c3387b076780
3f0115cd05d7857a8119eff0479f5812df155d3d
84518fa2565f7f63933d3c552e1dc07f84c71f4a3df5d2821484c371ef57b924
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "84518FA2565F7F63933D3C552E1DC07F84C71F4A3DF5D2821484C371EF57B924"
Last-Modified: Tue, 07 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3971
Expires: Thu, 09 Mar 2023 06:47:54 GMT
Date: Thu, 09 Mar 2023 05:41:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c39eb921d3df12f6f6197afbf1928cb3
99833285c76a5f950c20eef37a0c7b8d9fb6c8cd
cc225692cd5966df2ca08e14a63e3070db3901fb1f5a129aa75c5fd9a5c6664d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CC225692CD5966DF2CA08E14A63E3070DB3901FB1F5A129AA75C5FD9A5C6664D"
Last-Modified: Wed, 08 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15873
Expires: Thu, 09 Mar 2023 10:06:16 GMT
Date: Thu, 09 Mar 2023 05:41:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a8901ec6f89f9452d6335be4dd3c3821
aca9da9cfc93413247952e224ac69d684f51d3ac
560f8228fedc912e05b84af1d19fcefca3fec82415180df5d18c5b2a3f533a68
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560F8228FEDC912E05B84AF1D19FCEFCA3FEC82415180DF5D18C5B2A3F533A68"
Last-Modified: Tue, 07 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14979
Expires: Thu, 09 Mar 2023 09:51:22 GMT
Date: Thu, 09 Mar 2023 05:41:43 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ed282214b024a7895d90e229e92bb1cc
1f447aa59287ce2b45860a1a909d005a41305f77
a35ae9f89cbc77ed5fe849acdc2701592799c335f2674776d69c25bca0a00c2e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 09 Mar 2023 05:08:55 GMT
content-type: application/json
age: 1968
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: dzmVXNzVYU5YzkV5iGOKg4WdkZ/XP1/DrLGWYrGaNza88KSBjLwSq/3dP47nTF5pfF7YjSRttl0=
x-amz-request-id: YKVK8SAHTY28HKD1
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 09 Mar 2023 05:18:17 GMT
age: 1406
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 09 Mar 2023 05:41:43 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Retry-After, Alert, Content-Length, Backoff, ETag, Content-Type, Cache-Control, Last-Modified, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 09 Mar 2023 05:03:42 GMT
age: 2281
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/jkzyjy=/
162.241.203.66200 OK 314 kB URL HTTP/2 lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/jkzyjy=/
IP 162.241.203.66:0
ASN #46606 UNIFIEDLAYER-AS-1
Size 314 kB (314326 bytes)
Hash ab13620a36f2caf2ff05733cf954d834
eec24f064659480aa93ba7815b00b09283f7ead0
4db0803c3c432291a5f88e60063923d1845a03beed6a62e7bf3f6e1216bbda5c
Analyzer Verdict Alert openphish Wells Fargo & Company
fortinet Phishing
GET /wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/jkzyjy=/ HTTP/1.1
Host: lilicamanequinsfiber.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ndsid=ndsadtjl0hkd4w8lf0ok29u
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Thu, 09 Mar 2023 05:41:43 GMT
server: Apache
X-Firefox-Spdy: h2
lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/css%20js/a
162.241.203.66200 OK 471 B URL HTTP/2 lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/css%20js/a
IP 162.241.203.66:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (471), with no line terminators
Hash 0f9b3140d06c22a22b4ee760b55b969b
18a353b358256301561165c578836549b1470d8f
c5bbf24cf64a90ae2d6c90f4bc1571626d09b4c5d6e0af0badd1d2e72ae49cfb
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
fortinet Phishing
GET /wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/css%20js/a HTTP/1.1
Host: lilicamanequinsfiber.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/jkzyjy=/
Cookie: ndsid=ndsadtjl0hkd4w8lf0ok29u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 08 Mar 2023 15:50:50 GMT
accept-ranges: bytes
content-length: 471
date: Thu, 09 Mar 2023 05:41:43 GMT
server: Apache
X-Firefox-Spdy: h2
lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/css%20js/nd
162.241.203.66200 OK 38 kB URL HTTP/2 lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/css%20js/nd
IP 162.241.203.66:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (38394)
Hash c6c79f344c8bbcee4b90542af9600a8b
8e07711e26c3271972d9739293d0c60151bd9009
23a1000b5986d9613a9089ad8bde53bb675e0555ecbddffd81bd6c0781112c35
Analyzer Verdict Alert urlquery phishing Phishing - Wells Fargo
urlquery phishing Phishing - Wells Fargo
fortinet Phishing
GET /wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/css%20js/nd HTTP/1.1
Host: lilicamanequinsfiber.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/jkzyjy=/
Cookie: ndsid=ndsadtjl0hkd4w8lf0ok29u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 08 Mar 2023 15:50:50 GMT
accept-ranges: bytes
content-length: 38396
date: Thu, 09 Mar 2023 05:41:43 GMT
server: Apache
X-Firefox-Spdy: h2
lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/css%20js/conutils-6.js
162.241.203.66200 OK 4.2 kB URL HTTP/2 lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/css%20js/conutils-6.js
IP 162.241.203.66:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9948), with no line terminators
Hash 23c694aa702fd9e861cf5bc53376957c
9c195c29344e78c404d9284ca62cb692fafdfd1c
21df6c65d8a0329143870509340c82a478f490a04b3017cd28e2c4744392f69f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/css%20js/conutils-6.js HTTP/1.1
Host: lilicamanequinsfiber.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/jkzyjy=/
Cookie: ndsid=ndsadtjl0hkd4w8lf0ok29u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 08 Mar 2023 15:50:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4188
content-type: application/javascript
date: Thu, 09 Mar 2023 05:41:44 GMT
server: Apache
X-Firefox-Spdy: h2
lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/css%20js/atadun.js
162.241.203.66200 OK 512 B URL HTTP/2 lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/css%20js/atadun.js
IP 162.241.203.66:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 3ec977ce2f5a3ac9bb8128a8844b9197
097bf1315b439ccb34af9bf75b7755135eb61881
d71180a7648da48253c4c70315b9e3ced286ab624ada20310d4d4752e9fe3dd2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/css%20js/atadun.js HTTP/1.1
Host: lilicamanequinsfiber.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/jkzyjy=/
Cookie: ndsid=ndsadtjl0hkd4w8lf0ok29u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 08 Mar 2023 15:50:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 512
content-type: application/javascript
date: Thu, 09 Mar 2023 05:41:44 GMT
server: Apache
X-Firefox-Spdy: h2
lilicamanequinsfiber.com.br/auth/static/scripts/conutils-6.2.2.js
162.241.203.66404 Not Found 836 B URL HTTP/2 lilicamanequinsfiber.com.br/auth/static/scripts/conutils-6.2.2.js
IP 162.241.203.66:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash e73571aebce42792b40325ac9117da29
d3fe79abd3a925079c1133a0d3c46fd8941514f7
2726faa315039af16d833fbca9694060c9cece0cbe9dd3069bdbba15d073aef2
Analyzer Verdict Alert fortinet Phishing
GET /auth/static/scripts/conutils-6.2.2.js HTTP/1.1
Host: lilicamanequinsfiber.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/jkzyjy=/
Cookie: ndsid=ndsadtjl0hkd4w8lf0ok29u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
last-modified: Thu, 06 Oct 2022 20:52:17 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 836
content-type: text/html
date: Thu, 09 Mar 2023 05:41:44 GMT
server: Apache
X-Firefox-Spdy: h2
lilicamanequinsfiber.com.br/auth/static/prefs/atadun.js
162.241.203.66404 Not Found 836 B URL HTTP/2 lilicamanequinsfiber.com.br/auth/static/prefs/atadun.js
IP 162.241.203.66:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash e73571aebce42792b40325ac9117da29
d3fe79abd3a925079c1133a0d3c46fd8941514f7
2726faa315039af16d833fbca9694060c9cece0cbe9dd3069bdbba15d073aef2
Analyzer Verdict Alert fortinet Phishing
GET /auth/static/prefs/atadun.js HTTP/1.1
Host: lilicamanequinsfiber.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/jkzyjy=/
Cookie: ndsid=ndsadtjl0hkd4w8lf0ok29u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
last-modified: Thu, 06 Oct 2022 20:52:17 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 836
content-type: text/html
date: Thu, 09 Mar 2023 05:41:44 GMT
server: Apache
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.148.231.253101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.148.231.253:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: m7ja6TjaQBsGfTyEF5Y08A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qt1Q47TWbKMsZkC7tqI9I0toZyQ=
is5.mzstatic.com/image/thumb/Purple118/v4/96/c7/76/96c776f8-3a0e-cda9-130d-8feadb33e5a2/source/1200x630bb.jpg
23.36.76.187200 OK 23 kB URL HTTP/1.1 is5.mzstatic.com/image/thumb/Purple118/v4/96/c7/76/96c776f8-3a0e-cda9-130d-8feadb33e5a2/source/1200x630bb.jpg
IP 23.36.76.187:0
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 630x630, components 3\012- data
Hash 0de02bcccca1f6c60cbe81eb5b29d98c
2da739cec7d4d3cb6a98018ef79239432675d3f1
a28ddc4b77e206e26f2f7949deab7b8d3a190f4676e9b59bcdcc004a41c91778
GET /image/thumb/Purple118/v4/96/c7/76/96c776f8-3a0e-cda9-130d-8feadb33e5a2/source/1200x630bb.jpg HTTP/1.1
Host: is5.mzstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: daiquiri/3.0.0
Content-Type: image/jpeg
Content-Length: 22987
x-apple-jingle-correlation-key: FTJIURWXYVJNSRFBDXD5YAATLE
x-apple-request-uuid: 2cd28a46-d7c5-52d9-44a1-1dc7dc001359
b3: 2cd28a46d7c552d944a11dc7dc001359-8ab2a599beeb4608
x-b3-traceid: 2cd28a46d7c552d944a11dc7dc001359
x-b3-spanid: 8ab2a599beeb4608
apple-seq: 0.0
apple-tk: false
apple-originating-system: UnknownOriginatingSystem
Last-Modified: Tue, 28 Feb 2023 01:04:40 GMT
ETag: "MSwxLjQuMC0yM0IsVmVyc2lvbiAxMi4xIChCdWlsZCAyMUM1MiksMTY3NzU0NjI4MDYxMSxpc0J1aWxkVmVyc2lvbk5vdFNldCw2MDE1NCxub0VmZmVjdA=="
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length,Content-Type,ETag,Cache-Control,Expires,Last-Modified
Timing-Allow-Origin: *
Strict-Transport-Security: max-age=31536000; includeSubDomains
x-daiquiri-instance: daiquiri:33624002:pv50p00it-hyhk12033901:7987:23RELEASE10:daiquiri-amp-processing-shared-int-001-pv
CDNUUID: 98256642-3fc7-4bb9-8735-7858cc8de491-1818892284
Cache-Control: no-transform, max-age=15006104
Date: Thu, 09 Mar 2023 05:41:44 GMT
X-Cache: TCP_MEM_HIT from a23-36-76-183.deploy.akamaitechnologies.com (AkamaiGHost/11.0.2-47096334) (-)
Connection: keep-alive
ocsp.digicert.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash 803a2f57675acbee00ee2a47900e4e30
8a953398ea0cc2135ed35aff8f6469b74733d227
4db35e24b4d5aa0e1ad6b53926971ef5c788285d4a09cbfe52a406539cdfddb4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6414
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 09 Mar 2023 05:41:44 GMT
Last-Modified: Thu, 09 Mar 2023 03:54:50 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 471
connect.secure.wellsfargo.com/jenny/nd
23.36.79.24200 OK 18 kB URL HTTP/1.1 connect.secure.wellsfargo.com/jenny/nd
IP 23.36.79.24:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2293)
Hash 27e7ac3d399a07be6ae127663171aca5
1c480d445473e7896968243d386868ebdea60cd8
a5e4586492a4eff5ea6f5d3dcc8f9d4182a86e3d8ac77c1dfd02692fe40491b7
GET /jenny/nd HTTP/1.1
Host: connect.secure.wellsfargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lilicamanequinsfiber.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Vary: accept-encoding
Content-Encoding: gzip
Content-Type: application/javascript;charset=ISO-8859-1
Content-Length: 17879
Date: Thu, 09 Mar 2023 05:41:44 GMT
Connection: keep-alive
Set-Cookie: ADRUM_BTa=R:36|g:00f327c5-4fc1-49fc-aab6-ee42966ad289; Expires=Thu, 09-Mar-2023 05:42:14 GMT; Path=/; Secure
ADRUM_BTa=R:36|g:00f327c5-4fc1-49fc-aab6-ee42966ad289|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Expires=Thu, 09-Mar-2023 05:42:14 GMT; Path=/; Secure
SameSite=None; Expires=Thu, 09-Mar-2023 05:42:14 GMT; Path=/; Secure
ADRUM_BT1=R:36|i:302812; Expires=Thu, 09-Mar-2023 05:42:14 GMT; Path=/; Secure
ADRUM_BT1=R:36|i:302812|e:4; Expires=Thu, 09-Mar-2023 05:42:14 GMT; Path=/; Secure
ISD_AB_COOKIE=A; Max-Age=7200; path=/; Domain=connect.secure.wellsfargo.com; Secure; httpOnly
DCID=zty82ZHx1zb+DEsGoCR4vTecglxb10YxybWoRFu4oUSBu4JY8yCVOZ0USK%2f%2fOSty; Domain=connect.secure.wellsfargo.com; Path=/; Expires=Thu, 09 Mar 2023 05:56:44 GMT;Httponly; Secure
_abck=DDA240AB5ED3D18DABCB7CC896CE5AC7~-1~YAAQFE8kF/UuNL6GAQAAmrzjxAnIInB5aoj5hhR4u/2PvEa1ceeW6Esjrh/yNTMaJvy8lda8jjmgFKNR2IT7E/OOzmAMEFRDMeAeOj7tUazFD9m6UgYnlqupFBazjckkAjJ8ByfV/Q1Yy5PasBCjxWJaRyAz05kNKhHyPIw/ufxeWF/QYp5WFyOvzP5m4u9VhG504jD9yK3B/N2HZWGYrrJQh15nnb72fSgdiaxHrdbiUvQ1hSzEIt3uhEfyLqOl/xLStAQ5eH9i6z+Lf7BqrcKwxkkZ3zTPjT3y9KrlYnoJUQ8E+aTmUiZTH5i/PzKwzmK7q2lHK2LgUD3qyR5po5bxExx7RT/9ZGn+8BUvVk+ZfYiV5m+aAH1QKAdvv5a+nw==~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Fri, 08 Mar 2024 05:41:44 GMT; Max-Age=31536000; Secure
bm_sz=63C5790810A98388BB4D491EA9ED778D~YAAQFE8kF/YuNL6GAQAAmrzjxBMEKOUDRzbKXiGEc4T/SNKAKLzDQ9WzEtYzzu4tBpdJ0qL2VTVFddw94zcmOa6YJhdacUdLI/8tnrWj/jCE2UpMmdRb0gXOhTC2XygWGCB0duExWKl0o74OWDI+Zt8peLrCG/dnmGV01KasrLmN9Tssd7WVGnP7tJc75O4dzel+EK2tZ0KQtYPYuw68OWjS4bUDy905MZ6Pl/YJN5T/kKmvuMM2ZBhArFxCSnGsUwPMHHiHjeLKkWyXYS1amClgbXoser6kEIn/vkWguT1v7leMWvQg~4604740~3621444; Domain=.wellsfargo.com; Path=/; Expires=Thu, 09 Mar 2023 09:41:44 GMT; Max-Age=14400
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 54939002388023971ddb6b7e7ad53403
21f73b23a35299dfbae64d57dd2762625a9a09f5
8f8b0574ea2dc28302dee0a9868c1c145f66a6735353d236a8bd024c624f55a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8F8B0574EA2DC28302DEE0A9868C1C145F66A6735353D236A8BD024C624F55A1"
Last-Modified: Thu, 09 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12079
Expires: Thu, 09 Mar 2023 09:03:04 GMT
Date: Thu, 09 Mar 2023 05:41:45 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 54939002388023971ddb6b7e7ad53403
21f73b23a35299dfbae64d57dd2762625a9a09f5
8f8b0574ea2dc28302dee0a9868c1c145f66a6735353d236a8bd024c624f55a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8F8B0574EA2DC28302DEE0A9868C1C145F66A6735353D236A8BD024C624F55A1"
Last-Modified: Thu, 09 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12079
Expires: Thu, 09 Mar 2023 09:03:04 GMT
Date: Thu, 09 Mar 2023 05:41:45 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 54939002388023971ddb6b7e7ad53403
21f73b23a35299dfbae64d57dd2762625a9a09f5
8f8b0574ea2dc28302dee0a9868c1c145f66a6735353d236a8bd024c624f55a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8F8B0574EA2DC28302DEE0A9868C1C145F66A6735353D236A8BD024C624F55A1"
Last-Modified: Thu, 09 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12079
Expires: Thu, 09 Mar 2023 09:03:04 GMT
Date: Thu, 09 Mar 2023 05:41:45 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70c6f776-b551-4a5b-8932-4e29593bbbe2.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70c6f776-b551-4a5b-8932-4e29593bbbe2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ca31631c1fcffffa565f9df236aba93c
8234854e81d9c373a29fa53623d3b07f5382a7ce
59cba980615bb557e1c853d2163ec7faaa4983b7a041640803f618800bc01fd3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70c6f776-b551-4a5b-8932-4e29593bbbe2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9901
x-amzn-requestid: cc48ab79-d2a9-4cf3-a7cd-43500aa05234
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BWO0AEftIAMFruA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640591b2-592175a26e7c6d1f12a06045;Sampled=0
x-amzn-remapped-date: Mon, 06 Mar 2023 07:09:39 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: jbOqyLJfLBr7l3-R-o4_SRSGU7l4E7t85f3DCJVcjIFzg8fPr3efiQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5c7981a979abd51ba7e5ca7d464fd048.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Mar 2023 08:25:04 GMT
age: 76601
etag: "8234854e81d9c373a29fa53623d3b07f5382a7ce"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff126aba3-5053-41e8-9adc-5cb3d542d065.jpeg
34.120.237.76200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff126aba3-5053-41e8-9adc-5cb3d542d065.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f57df98d880821f3ed2d1227ea1e29c0
ec77a342171a7b2df5b4bb4ff267eb9e7b6fdc9d
d9c8877d58e5625ffd72222372334fa857611de3e444732e4ac025571df9e333
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff126aba3-5053-41e8-9adc-5cb3d542d065.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8421
x-amzn-requestid: f161f3bb-2b66-4ec8-a2d0-460296e59d8b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BezfVHwPoAMF9CQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6408ff95-7fd8848f23e348491da23bc3;Sampled=0
x-amzn-remapped-date: Wed, 08 Mar 2023 21:35:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: WhZOgffFrj1iFAfsjgAIAP7uqlu_51nukKxgziuJgMjU8lOxFKKnUg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Mar 2023 21:45:40 GMT
age: 28565
etag: "ec77a342171a7b2df5b4bb4ff267eb9e7b6fdc9d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc07f45e6-f472-4bb8-a38c-568302947acb.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc07f45e6-f472-4bb8-a38c-568302947acb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85aab04ab88ca224da99e37214100d60
1cdaea2ae90ef7272e589444ca10807cf20075fd
9f264d8178e0ab8dbca00ce02614d1e1d0fc5e1b10d988cf9ac24313804e04d4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc07f45e6-f472-4bb8-a38c-568302947acb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8474
x-amzn-requestid: 7c2323dc-d57c-4ce4-b920-c4950b926012
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BS7R3GYGoAMF_JA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64043f3e-67d8f0fb6108a56561de29cf;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 07:05:34 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: GDwMpgmL8SdOCPZB9MKYsKXUkRLTyAQTEGWM4WTVNb71wG2gR_p86g==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 548adcda884eed02304ba5d6a1d7f514.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Mar 2023 22:09:24 GMT
age: 27141
etag: "1cdaea2ae90ef7272e589444ca10807cf20075fd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5f13a1-64f5-41ac-aa1b-5fb0a6b438d4.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5f13a1-64f5-41ac-aa1b-5fb0a6b438d4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd029abcba5db74cecb02bad1a036c43
bc714ee0389e279919dde08149be61c4dc9ab0a7
10ae90728b38f7aeba134961a7b80c68c213a09eeef618ef3d66f3305b19834e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5f13a1-64f5-41ac-aa1b-5fb0a6b438d4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4770
x-amzn-requestid: 963dae3d-8336-4a5b-8b25-c3617f946d73
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BUZkWFhLIAMF6FQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6404d61b-1b705b460f7539f97c3dd7e5;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 17:49:15 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: uGH8_fFeonTgrNF5RYeA6pMhKoh24-6W74Vhju3CcJ7A8LEGFse9Sw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 5292c0d5844327feadb38f1efe42ebc6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Mar 2023 21:51:07 GMT
age: 28238
etag: "bc714ee0389e279919dde08149be61c4dc9ab0a7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658d3e61-18db-424d-b357-80193db0d290.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658d3e61-18db-424d-b357-80193db0d290.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e2c377855a595a55f497177497349e0
9f102acd9b03628e0f03436d46a3b11442492171
af4c0f67254fd555acafc35507f33947dcc6146b0ff8e007bcabdc78e5234603
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658d3e61-18db-424d-b357-80193db0d290.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7377
x-amzn-requestid: 2c87a46e-ecb4-4835-bb25-295cd85fabc6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BWPJ0F6UoAMFaaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6405923e-53e010a410121d2424758b79;Sampled=0
x-amzn-remapped-date: Mon, 06 Mar 2023 07:11:58 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: pIAI17_9wcsY8_IBe9uU2yiQNPuvToI9xycaLKY-USqa2gQzrl6nBA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 31dfa94142c6eaf975b0e5454c00340a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Mar 2023 07:31:12 GMT
age: 79833
etag: "9f102acd9b03628e0f03436d46a3b11442492171"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e099794-4e7d-4d03-a39a-3ce385884bff.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e099794-4e7d-4d03-a39a-3ce385884bff.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 636ad724875a1b8f978d351d851af52d
61075cafcbfe1c763ab0b1c79540d42e7ae63942
382228b2396099885438936cd087a9bfa2d272160475859123f8a7ec7f5f34c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e099794-4e7d-4d03-a39a-3ce385884bff.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7206
x-amzn-requestid: bc793a8e-f967-4a1b-81d2-be45c56bd93b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BPorOF-CIAMFX6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6402ee47-3e38c6af4234bd164a429258;Sampled=0
x-amzn-remapped-date: Sat, 04 Mar 2023 07:07:51 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: XIYfAxm8RWhLOfQCZA5tr3eMhggSG2AHKx9zL_nU2RMP-68t_3HeLg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 9adef5b1c5fc9ca80d6f4f8d19e103a2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Mar 2023 19:19:54 GMT
age: 37311
etag: "61075cafcbfe1c763ab0b1c79540d42e7ae63942"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/css%20js/login-userprefs.js
162.241.203.66200 OK 0 B URL HTTP/2 lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/css%20js/login-userprefs.js
IP 162.241.203.66:0
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/css%20js/login-userprefs.js HTTP/1.1
Host: lilicamanequinsfiber.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lilicamanequinsfiber.com.br/wp-content/themes/twentytwentyone/inc/lkjl/home/jyxzjk=/jkzyjy=/
Cookie: ndsid=ndsadtjl0hkd4w8lf0ok29u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 08 Mar 2023 15:50:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 09 Mar 2023 05:41:44 GMT
server: Apache
X-Firefox-Spdy: h2