Overview

URLagileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173
IP 104.21.17.61 ()
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-11-28 09:37:10 UTC
StatusLoading report..
IDS alerts0
Blocklist alert5
urlquery alerts
10
Phishing - Navy Federal Credit Union
Phishing - Navy Federal Credit Union
Tags None

Domain Summary (10)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
ocsp.pki.goog (2) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 686 1400 142.250.74.3
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 52.89.20.60
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 67626 34.120.237.76
ocsp.digicert.com (2) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 682 1592 93.184.220.29
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2374 34.102.187.140
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
fonts.gstatic.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 510 11628 216.58.207.195
r3.o.lencr.org (7) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2366 6202 23.36.77.32
agileprofessional.com.br (21) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 9284 106283 172.67.222.251

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-28 medium agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/q (...) Phishing
2022-11-28 medium agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/i (...) Phishing
2022-11-28 medium agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/i (...) Phishing
2022-11-28 medium agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/i (...) Phishing
2022-11-28 medium agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/i (...) Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 104.21.17.61
Date UQ / IDS / BL URL IP
2022-11-30 18:36:55 UTC 16 - 0 - 24 agileprofessional.com.br/wp-content/auth/14e4 (...) 104.21.17.61
2022-11-30 18:36:22 UTC 10 - 0 - 6 agileprofessional.com.br/wp-content/auth/a2b3 (...) 104.21.17.61
2022-11-30 18:36:16 UTC 9 - 0 - 3 agileprofessional.com.br/wp-content/auth/a2b3 (...) 104.21.17.61
2022-11-30 18:36:11 UTC 9 - 0 - 2 agileprofessional.com.br/wp-content/auth/14e4 (...) 104.21.17.61
2022-11-30 11:31:22 UTC 11 - 0 - 6 agileprofessional.com.br/wp-content/auth/14e4 (...) 104.21.17.61


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-06-10 14:49:59 UTC 0 - 1 - 0 canvashub.com/myfiles/ac3dc3031d303b9b969c3a3 (...) 23.227.38.65
2023-06-10 14:49:56 UTC 0 - 1 - 0 canvashub.com/myfiles/ac3dc3031d303b9b969c3a3 (...) 23.227.38.65
2023-06-10 14:49:02 UTC 0 - 2 - 0 myvideo.cc/movies/TEl6SW1OSUU5Nit4ejVCcnpicFl (...) 104.27.207.92
2023-06-10 14:48:02 UTC 0 - 2 - 0 www.abcd-goldfish.com/blog/wp-content/themes/ (...) 104.21.29.247
2023-06-10 14:44:26 UTC 0 - 0 - 7 nextdaydeliveryupdate.com/ 188.114.96.1


Last 5 reports on domain: agileprofessional.com.br
Date UQ / IDS / BL URL IP
2022-11-30 18:37:51 UTC 9 - 0 - 6 agileprofessional.com.br/wp-content/auth/14e4 (...) 172.67.222.251
2022-11-30 18:37:13 UTC 14 - 0 - 28 agileprofessional.com.br/wp-content/auth/a2b3 (...) 172.67.222.251
2022-11-30 18:36:55 UTC 16 - 0 - 24 agileprofessional.com.br/wp-content/auth/14e4 (...) 104.21.17.61
2022-11-30 18:36:09 UTC 8 - 0 - 3 agileprofessional.com.br/wp-content/auth/a2b3 (...) 172.67.222.251
2022-11-30 18:36:22 UTC 10 - 0 - 6 agileprofessional.com.br/wp-content/auth/a2b3 (...) 104.21.17.61


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-04-01 08:22:06 UTC 23 - 0 - 6 www.maycanbangionz755.com/wp-content/.tmb/6a3 (...) 103.142.25.186
2023-03-26 08:39:20 UTC 23 - 0 - 6 www.maycanbangionz755.com/wp-content/.tmb/6a3 (...) 103.142.25.186
2023-03-26 03:36:16 UTC 23 - 0 - 6 www.maycanbangionz755.com/wp-content/.tmb/6a3 (...) 103.142.25.186
2023-03-26 00:57:40 UTC 23 - 0 - 6 www.maycanbangionz755.com/wp-content/.tmb/6a3 (...) 103.142.25.186
2023-03-25 18:35:33 UTC 23 - 0 - 6 www.maycanbangionz755.com/wp-content/.tmb/a17 (...) 103.142.25.186

JavaScript

Executed Scripts (9)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 4) - SHA256: b1ab1e892617f210425f658cf1d361b5489028c8771b56d845fe1c62c1fbc8b0
2022


HTTP Transactions (44)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9941
Expires: Mon, 28 Nov 2022 12:22:40 GMT
Date: Mon, 28 Nov 2022 09:36:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8645
Expires: Mon, 28 Nov 2022 12:01:04 GMT
Date: Mon, 28 Nov 2022 09:36:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4884
Cache-Control: max-age=94538
Date: Mon, 28 Nov 2022 09:36:59 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 11:52:37 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173 HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             172.67.222.251
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Date: Mon, 28 Nov 2022 09:36:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-powered-by: PHP/7.4.28
vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6%2FiCDMeD5mK40KETIt0Wg5yKH7am12XMhNdWcbl01y0zcmfGzJu6H64uqWFcsBZOu26%2BYjDRp8LSORWRpBRuc4gTwbESte36A8VVMTtdcz6i1Kd80ddosyTSoJ6ORoouCj%2FnvxtEH2lH3M0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f551ba5b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ISO-8859 text, with very long lines (482), with CRLF line terminators
Size:   3707
Md5:    6b6361b500ee5c124e84fbd282966df5
Sha1:   856c8f438ab7bdc52e3102c85bbd5f36d71b0692
Sha256: 0ddc19ac71f496881fc46380bafec1a8d586cd3d6eaae79f2c00cd182aa44059

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: 7NrN3Xmx9/QZiKLWRqTc2nvSQhXAa3DYIKFZNwGlzEfBP0X6BkiApve2b1HYo2R7SLRwAavoAp4=
x-amz-request-id: K1R1W456Y2J7MM2A
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 08:44:58 GMT
age: 3121
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 09:19:32 GMT
cache-control: public,max-age=3600
age: 1047
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    567df7db606cf5d0871aa5bc9311b6da
Sha1:   4263faac7cbab2fcaf6661911dcad5091c06be17
Sha256: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 09:36:59 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/styles.css HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173

                                        
                                             172.67.222.251
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Content-Length: 10660
Connection: keep-alive
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 08:37:25 GMT
etag: "cbf5-636e2720-4baeba5;gz"
last-modified: Fri, 11 Nov 2022 10:42:40 GMT
content-encoding: gzip
vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 3573
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TAgwYFuETfmDz5Nsfz6b2I8%2Fz8eOGBBM%2Fc70VQ1UmEFgwSkCJHw4Q2G63Enl9caB4v4jR4MLlvaprYwev06Q4vlkzL1mG2pEiiWUM5oSpsz9Ai7%2FYhBxJ72%2FrsAoyQYWPUrhNUde7yLZvj8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f57bed0b4fa-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   10660
Md5:    572afe91253e9c538d42af3f0762dbfb
Sha1:   8cfbbfb1c8e45ba4d068c2ff69148ce8fb10cb30
Sha256: b2353c89a333b9ca92c5c524f9f6da0de66b77ea3e9778cc60ddfbce745cb7c9
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/pm_fp.js HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173

                                        
                                             172.67.222.251
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Content-Length: 7541
Connection: keep-alive
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 08:37:25 GMT
etag: "63fb-636e2720-4baebbd;gz"
last-modified: Fri, 11 Nov 2022 10:42:40 GMT
content-encoding: gzip
vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 3573
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qjVKXlFkT2DvFEIIlRyjd%2FJBbo8JuLuI8L1yCL17C8NOUSivUj8ae573KMHKlfRRHnHAfmFczVRwcneSnqAC6TTZAS%2Fb6xZNUYvnZx3CVzeRSzrRkhQLPSe3RdjqTUTUeJSZDFMmVa9xxTI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f57cee6b4fa-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (333)
Size:   7541
Md5:    8bcb53504a40234ea6e94c476f7e0006
Sha1:   e2dfd2ee0f311b92e439eab3d24d566c871bf4b9
Sha256: c31d7cc1db99f548456cc2b272cbf392159242742be6ec5cf495f7e48295f43f

urlquery:
  - Phishing - Navy Federal Credit Union
Blocklists:
  - fortinet: Phishing
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/jquery-1.js HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173

                                        
                                             172.67.222.251
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Content-Length: 24605
Connection: keep-alive
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 08:37:25 GMT
etag: "119ee-636e2720-4baeba0;gz"
last-modified: Fri, 11 Nov 2022 10:42:40 GMT
content-encoding: gzip
vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 3573
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FzMrhCfM9rUpVnQxz82Z2tlvr6Lb8j1QNKPJN6CZ8MjvR7NRNNmGAc4qeRNuoIRZC%2FE28yUpGPEaLLKqgBChKRflt9fOnH0ucYiDuC1Kr1k8OwgfQcE0cAMs2PkFErGgWnxW2EI6wCGn9nE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f57cb4b0af6-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (820)
Size:   24605
Md5:    1b808bf12618adb3e9eeacfa0636195b
Sha1:   fb91555b4ad0783037dbf016cdf5583d302ed51b
Sha256: 20d9da0a3924df0800992a1beba44b0c317918eb1002198d61655f540746c94c

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/jquery.js HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173

                                        
                                             172.67.222.251
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Content-Length: 799
Connection: keep-alive
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 08:37:25 GMT
etag: "7c1-636e2720-4baeb8e;gz"
last-modified: Fri, 11 Nov 2022 10:42:40 GMT
content-encoding: gzip
vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 3573
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lCPBfASw4n5ZIsKzlPnF5L%2BTKtCKo32m9Tad9zz4joNEJoHvyi9c1Y9PLziFbnu6Xl%2BtpvAqo2t8xM4UsyRi0sw2yWHtvxYxZkVKqVN%2BH64FxCsodql%2BkQhyFDs3Jmq5F00n2aZoPE5a8ek%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f57caf90b31-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   799
Md5:    b839cbe15409867ac2bd5f8b240c0047
Sha1:   866943738f52a6904d579e76bf90ed0d9e73c68c
Sha256: 81fd80b4074611fe0377bbd4bc17f17672d572cf59fb0aad46724522039eda86

urlquery:
  - Phishing - Navy Federal Credit Union
Blocklists:
  - fortinet: Phishing
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/facebox.js HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173

                                        
                                             172.67.222.251
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Content-Length: 2866
Connection: keep-alive
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 08:37:25 GMT
etag: "2437-636e2720-4baeb85;gz"
last-modified: Fri, 11 Nov 2022 10:42:40 GMT
content-encoding: gzip
vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 3573
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=npTMN%2BXS%2FDnLaqfyGYjbEiYl6R5W7HQO%2BABLKa8HHQZ%2Fui01hXKxCzeF1MHjKSG2UWCSpXilZ%2BQLpfvGvxi1hdCCoCDdHSVtOGDAUZXTc2kpiTpNS0qkieVuwCF0f64e2GF%2FW9WbO%2FYdr0Q%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f57ce331c0e-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   2866
Md5:    772054959ecbba9594b4f72b2ff5d74e
Sha1:   dba924f1b0a75c2228128b2acf9bae1c157250e2
Sha256: aca55de1dfad40b13c1d26c77549c9a90e201206f7c5ff9a16dfc504c52136c2

urlquery:
  - Phishing - Navy Federal Credit Union
Blocklists:
  - fortinet: Phishing
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/css.css HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173

                                        
                                             172.67.222.251
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Content-Length: 279
Connection: keep-alive
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 08:37:25 GMT
etag: "287-636e2720-4baebb3;gz"
last-modified: Fri, 11 Nov 2022 10:42:40 GMT
content-encoding: gzip
vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 3573
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T%2BQVgFfaYCbvogJTmj4TKP0Vaxd0D%2BWRAfaN6c45Ee4pthnPefW4DRmrMN5KJ6Z12V4qpPuqniY6cppq4soOuBlgk8ORkt1bBvwngFgByU%2FBY%2BnGvfCCp4E8cBtTU3noM6z%2Bv87Y6J9itBU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f57ce20b4ed-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   279
Md5:    83694301793cdf30385ef7f902875c09
Sha1:   d6697995c9af9a0a68a46ef34377d1a8e5c7315f
Sha256: 4e2f86faf272b12f948bcce12ea795791b1c93d67e6845314762df49d032e513

urlquery:
  - Phishing - Navy Federal Credit Union
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/facebox.css HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173

                                        
                                             172.67.222.251
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Content-Length: 774
Connection: keep-alive
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 08:37:25 GMT
etag: "a8d-636e2720-4baebae;gz"
last-modified: Fri, 11 Nov 2022 10:42:40 GMT
content-encoding: gzip
vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 3573
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BTz05fNZJtuJWI4OXhyt7WKnOOC3Qu23M5fdqMz9gkqAHCCPspHKrk8RXRu%2FqjZ3Obu%2Bb6GfqmVxAyLbVrElt%2FenOqZHxMpelgqFZErs6bmA9lSfA5lRf5wdTA8c0a1VtZYgfC4mLo1VgMw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f57ce381c02-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (310)
Size:   774
Md5:    8b9d32b1d982068418f9a1823f672e9d
Sha1:   cb4aef9a9701da543f47034c98b63a7fb1aee590
Sha256: f945ee0a48e58257d6376064b189f46941270d787e5b350dc83b059a7ca59661

urlquery:
  - Phishing - Navy Federal Credit Union
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/footer_equal_housing_logo.png HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173

                                        
                                             172.67.222.251
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Content-Length: 1306
Connection: keep-alive
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 08:37:26 GMT
etag: "51a-636e2720-4baeba9;;;"
last-modified: Fri, 11 Nov 2022 10:42:40 GMT
CF-Cache-Status: HIT
Age: 3573
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=goQq2KFeppdEHACjogNebFFkepmH9eKSvg2Y9zFUDVdb5UF5Gn60zpuxFbX5p3nXnoXvIati7Umn%2FlTI%2Fc1zyAuGjyC%2BH1ag50nvF0oxCG3qEsdhosQYlgiFUGtBs8N55aH2ZbKcOVxnYn8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77121f57ee42b4ed-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 22 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   1306
Md5:    ba37ed2bfc2714cc23901467f3729083
Sha1:   ad1afbbe6b1e4db24d82c97d0f11270364dc5d8f
Sha256: f610a1c5a2648dd9405f74c42b87763940044fde590877666aa7cd5ddcad9d76

urlquery:
  - Phishing - Navy Federal Credit Union
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/navy_fed_logo.png HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173

                                        
                                             172.67.222.251
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Content-Length: 8167
Connection: keep-alive
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 08:37:26 GMT
etag: "1fe7-636e2720-4baeba4;;;"
last-modified: Fri, 11 Nov 2022 10:42:40 GMT
CF-Cache-Status: HIT
Age: 3573
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KNQ2%2FK0qho%2BfZ5Pm3KYvdWc705WtXMhRwDTTqUuxpHYv0XjgH6PTZtpGeIJTyLM1Jq%2FzKtJEQWj%2BNg9yMu%2FGo4zAbkRsrXF48oy8JG2SRVggIcaFymKduuKNMrXu2GWx4CzaRbG1nrKtyE8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77121f57ee4c1c0e-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 262 x 72, 8-bit/color RGBA, non-interlaced\012- data
Size:   8167
Md5:    5bb6117010267d83596835c656dde37b
Sha1:   e84fc9bb92b2d4b50d7e7cf5a14b162a5063666d
Sha256: 0f88c98aba4ab56ee718ff00281d971cd4762b800c558408638d83b611253505

urlquery:
  - Phishing - Navy Federal Credit Union
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/footer_navy_fed_logo.png HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173

                                        
                                             172.67.222.251
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Content-Length: 3014
Connection: keep-alive
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 08:37:26 GMT
etag: "bc6-636e2720-4baebad;;;"
last-modified: Fri, 11 Nov 2022 10:42:40 GMT
CF-Cache-Status: HIT
Age: 3573
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ci5JnFErlO8HbWs6ElDeFvYhICJIfpQ3aHDac%2BgQt31TB1MuBj6wKHkRtWmmGNl5ygT6LHy9SIdMPlbx9I%2FR%2FOR%2FHXXKz24apyzs224%2BfIjqjTcQNII1ReZd32VXg427lPs0kE%2BT4XUsjrQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77121f57eb830af6-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 73 x 43, 8-bit/color RGBA, non-interlaced\012- data
Size:   3014
Md5:    910b5a8703d923763de890e8be7a437e
Sha1:   dcfab8799e5f2c81522aeea9037b1b4e521545cd
Sha256: 26aa1e5d382461643776161453f29771a528577f5a831f0bb2036e4357513c1e

urlquery:
  - Phishing - Navy Federal Credit Union
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/gudea/v4/6M2RKly85u67vSsXH0-zqvesZW2xOQ-xsNqO47m55DA.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://agileprofessional.com.br
Connection: keep-alive
Referer: http://agileprofessional.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10680
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 08:59:17 GMT
expires: Thu, 23 Nov 2023 08:59:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Aug 2014 14:55:21 GMT
age: 434263
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 10680, version 1.1\012- data
Size:   10680
Md5:    c123a16ad761fa66090d2ced22133855
Sha1:   67d9668af24a5ebb35a73759c50b533c41ac0dc7
Sha256: afdd3513410ee9407424d26662d6c7f2688845ab5fcef8882eb20ef40bbdb83e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/nfcu_images/globe_bg.png HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/styles.css

                                        
                                             172.67.222.251
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=UTF-8
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-powered-by: PHP/7.4.28
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
vary: Accept-Encoding
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v9GUzh7Ki%2FjWR2Z1V9kHfCO877Z1VzXnmoV6ThyhR%2FFVsw7%2FWatkCUiflyleJgN6LfVn8BouPn3NDs%2Fo8R%2FomZhfiza5yULqjWexfLtw52quWceaYUkH24V1v8M%2FJo2cpqq8q%2BFc%2BTgs28g%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f587eca1c0e-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size:   2644
Md5:    3c32982e1f48797d87295a4237971f09
Sha1:   43f38c27234a49505e9bbbd73bd47c2ba47c0ec8
Sha256: 6790fb9a42b6e2ea88a55f1f86db97ce8bef7aeb16be9567831580aeeb1391e4
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/nfcu_images/navy_fed_logo.png HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/styles.css

                                        
                                             172.67.222.251
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=UTF-8
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-powered-by: PHP/7.4.28
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
vary: Accept-Encoding
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Aw03i4mJU6AIFgQj8gmG8KOifLShtovKBuxbHQBHL0O7hEqo3TONO%2FDPh8WiOHB26Z%2BHHZnm08%2Ft5k49R0MDWKZ3DwSWuVqM3KOrg0%2FkDjhyllSvk7zvaNIKVbhg9PJoCkA9KbZ1VHEPOwY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f587f25b4ed-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size:   2644
Md5:    3c32982e1f48797d87295a4237971f09
Sha1:   43f38c27234a49505e9bbbd73bd47c2ba47c0ec8
Sha256: 6790fb9a42b6e2ea88a55f1f86db97ce8bef7aeb16be9567831580aeeb1391e4
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/nfcu_images/bg_gradient.png HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/styles.css

                                        
                                             172.67.222.251
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=UTF-8
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-powered-by: PHP/7.4.28
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
vary: Accept-Encoding
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5SMX5jt%2Fpi4P8RbHasKx%2F7XsR4JqkPV3NOAFqQJIYfPVvtHDP6Lmbbvsfyc9yqpsUkaPMw9CjKAoWp81xISFUA92SkxbHnwVFTdcsUA4tvU52oYwCWU9G5VZuQim89sPo9OWUSLPLTnwT%2Fo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f587bf00af6-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size:   2644
Md5:    3c32982e1f48797d87295a4237971f09
Sha1:   43f38c27234a49505e9bbbd73bd47c2ba47c0ec8
Sha256: 6790fb9a42b6e2ea88a55f1f86db97ce8bef7aeb16be9567831580aeeb1391e4
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/nfcu_images/info_question_mark_icon.png HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/styles.css

                                        
                                             172.67.222.251
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=UTF-8
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-powered-by: PHP/7.4.28
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
vary: Accept-Encoding
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j%2BQfUz%2Fk%2F9AWRmmbSmSQsRorGGqsJhrOnynGouRXZs%2Bj5H7zzCcaLRoiO4Fk%2F8E3HJGp4%2B49TCPiC%2F2stovC38VtuSYEKqplnqbLTdaMHkic2zXFaU%2BwOAxqMWeLAFU3I%2Fxq4D4kgei3siw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f588fb7b4fa-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size:   2644
Md5:    3c32982e1f48797d87295a4237971f09
Sha1:   43f38c27234a49505e9bbbd73bd47c2ba47c0ec8
Sha256: 6790fb9a42b6e2ea88a55f1f86db97ce8bef7aeb16be9567831580aeeb1391e4
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/nfcu_images/log_in_bg_with_shadow.png HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/styles.css

                                        
                                             172.67.222.251
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=UTF-8
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-powered-by: PHP/7.4.28
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
vary: Accept-Encoding
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XQkzPBh7Qn%2BBg05qcTmRZvNlw7lvQvobjGoOvOBL9w3Mhrk706SQKJ6Ydv6LGwZEBzpMcDt6%2FanqdvzOHkQebmaQJdDiueM6znGP9iu0muH2riMQ6dohRrBk8AewYEva9t6W0gqsDMXiBDc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f587efe1c02-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size:   2644
Md5:    3c32982e1f48797d87295a4237971f09
Sha1:   43f38c27234a49505e9bbbd73bd47c2ba47c0ec8
Sha256: 6790fb9a42b6e2ea88a55f1f86db97ce8bef7aeb16be9567831580aeeb1391e4
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/nfcu_images/footer_bg.jpg HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/img/styles.css

                                        
                                             172.67.222.251
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=UTF-8
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-powered-by: PHP/7.4.28
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
vary: Accept-Encoding
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t6lfc5HsSDa%2FWcmgfDDfrxYePPuY6bZBeEsO%2FMdAL6gPLY%2FoKqLKzJvw6VOHOwvnGGt8orJw%2FCR8XJHt%2BZl8Mc6RgaccYWxnwShf99l%2Bv1ZjRQN450%2B0YIYHyt%2B6y0xGrNLPMbIjLQFAcf0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f58dfecb506-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size:   2644
Md5:    3c32982e1f48797d87295a4237971f09
Sha1:   43f38c27234a49505e9bbbd73bd47c2ba47c0ec8
Sha256: 6790fb9a42b6e2ea88a55f1f86db97ce8bef7aeb16be9567831580aeeb1391e4
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 09:11:12 GMT
cache-control: public,max-age=3600
age: 1548
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/nfcu_images/modal_images/modal-close.png HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173

                                        
                                             172.67.222.251
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=UTF-8
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-powered-by: PHP/7.4.28
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
vary: Accept-Encoding
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QHh9mgjhfQxfL4sTijvS946TSqT8jdpDrw5fhmKpZhpqGaV9zxtmrDW18mfJ7285G%2FJwqO1kwI%2FcvS%2Fa6PkFQGBgsABWjv36pjsaulJr2WWlWOWj8FuK3HpoRfOS%2BzBi%2BfORa7pwoGRJL0Q%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f5a9a23b4ed-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size:   2644
Md5:    3c32982e1f48797d87295a4237971f09
Sha1:   43f38c27234a49505e9bbbd73bd47c2ba47c0ec8
Sha256: 6790fb9a42b6e2ea88a55f1f86db97ce8bef7aeb16be9567831580aeeb1391e4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3893
Cache-Control: max-age=88485
Date: Mon, 28 Nov 2022 09:37:00 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 10:11:45 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/nfcu_images/modal_images/close.png HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173

                                        
                                             172.67.222.251
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=UTF-8
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-powered-by: PHP/7.4.28
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
vary: Accept-Encoding
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SJgx%2BosE93ygSyUCD%2BJvCBVNTf1coC28oeAL%2FQmOvHjdo5ERB1%2F2WhGPX%2FkgKBtpzMoWEGUgiS1tAQ4f2hL0cSO4%2F5V6aWlsVWbHBgjNQoYmDhUBFTZTQT9oNUSS4ncKygjFbc7ONTYHQgc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f5a78f41c0e-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size:   2644
Md5:    3c32982e1f48797d87295a4237971f09
Sha1:   43f38c27234a49505e9bbbd73bd47c2ba47c0ec8
Sha256: 6790fb9a42b6e2ea88a55f1f86db97ce8bef7aeb16be9567831580aeeb1391e4
                                        
                                            GET /wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/nfcu_images/modal_images/loader_large.gif HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173

                                        
                                             172.67.222.251
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=UTF-8
                                            
Date: Mon, 28 Nov 2022 09:37:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-powered-by: PHP/7.4.28
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
vary: Accept-Encoding
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NJSuRz0uT%2FeI%2BZIXba2GFrX0BFXj3oinTPQhMbsDle2i0hMwTQDCARi1Cl8oC1UsEk4T6hsQnHDFOuYX7HukBeCdsBbq4mByYEGeRoFWgLilN2DjSzRXaLxHZ4mUG7N0I%2ByLMUbxWJ%2FvUZ4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f5aae350af6-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size:   2644
Md5:    3c32982e1f48797d87295a4237971f09
Sha1:   43f38c27234a49505e9bbbd73bd47c2ba47c0ec8
Sha256: 6790fb9a42b6e2ea88a55f1f86db97ce8bef7aeb16be9567831580aeeb1391e4
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hm0dNVd4I+xIZ5K85vLPgQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             52.89.20.60
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0gbXXLbFI5hwh7eTyV7nQtuBhCg=

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: agileprofessional.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://agileprofessional.com.br/wp-content/auth/0167f5129727bb1e7c87fca6926ee9c1/que.php?entity=1994173

                                        
                                             172.67.222.251
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=UTF-8
                                            
Date: Mon, 28 Nov 2022 09:37:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-powered-by: PHP/7.4.28
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
vary: Accept-Encoding
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OQO1mrHByTYNl5RuRnnXplZWf73JHyVunbyvxte5H%2Fo0bKmzeWaU6qFFkvDh%2BKg5WYKNp0T5%2B%2BzuYxov5di%2Fb%2BTfT5WMnaatAocZtYRkgQheljoqisomG0WrASgx3hhzwBxKir2S%2Fc5GFxI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77121f5cd8440af6-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size:   2644
Md5:    3c32982e1f48797d87295a4237971f09
Sha1:   43f38c27234a49505e9bbbd73bd47c2ba47c0ec8
Sha256: 6790fb9a42b6e2ea88a55f1f86db97ce8bef7aeb16be9567831580aeeb1391e4
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6415
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:37:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6415
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:37:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6415
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:37:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6415
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:37:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6415
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:37:02 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 41746
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9430
Md5:    1f434933b5bd6377d299ada22d1ae7ef
Sha1:   075531f525e625b117b2497f31139c9824d0e9c5
Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ff6b6f2-e6dd-4654-9894-50de6f502f83.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 11255
x-amzn-requestid: ce06e0cc-3874-4a3d-a6c5-5cc1cb342138
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7w8EEOIAMF_6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99f-5ca652aa369ee1690b0d08cc;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0diXekmaxz0zbwy1wShePUxsvtC59YoEPcLJmS_ql6uKG0MtqbxbeQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:03:04 GMT
age: 41638
etag: "602e8ba5c6671ff947acfda757577ddc8ecec6ec"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11255
Md5:    6e240caa3153ea25c34d07185b47f8a5
Sha1:   602e8ba5c6671ff947acfda757577ddc8ecec6ec
Sha256: c2b37bf1ef003ceffaaf4612f2001b6f7998d5b95cd55b32c79fefcb24ccad7f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd94c980-e701-4603-9381-0bd47116d31d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5989
x-amzn-requestid: db10fcc5-80ab-4650-af49-d5afe36706f3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR78LHQqIAMF9_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9e7-4cbd19e3227894844807742c;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: P0Nx-FcvcV-f5cRPwZr5sEMb8pH3AoYFr185q_D0X2bE7z40nDn91w==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:04 GMT
age: 42358
etag: "21aa6418f3a0d2b64925b66d5fb9079b7e84a11c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5989
Md5:    fa848cb85e85df184b078fe7aa95ae52
Sha1:   21aa6418f3a0d2b64925b66d5fb9079b7e84a11c
Sha256: 37d299c166e3350dee6dee647e98a86f8bd916d186bae12c42764ed0a3177085
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa915ba56-f7bc-48fc-b725-b932389634d5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 15639
x-amzn-requestid: 98e846b4-287f-4698-9529-25bcc2727a4a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR78dGReoAMFiDw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9e9-62c41b2717bd8e6f3b3797da;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: fxNulyOR88nEcjtrXm1dECsulI-MsAxm2Zl0Y83uMz23lGh18d-ZBA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:56:55 GMT
age: 42007
etag: "5b97bfd787afcb912cdbef0f137f78a059082992"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   15639
Md5:    0a4e0bb1e2748bdce6bbf685a910f0fc
Sha1:   5b97bfd787afcb912cdbef0f137f78a059082992
Sha256: a7bc9adeb22cb57675e907bd961a6f554e6b7a46414ed782bcc9b53d68b1c328
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 12555
x-amzn-requestid: 2d9827ba-fc88-4deb-9844-f5b42764b2e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MHPWIAMFQMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-42986aeb284115943c849306;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KcI_BV4rZkM-2CmcFI5qkJLT-OOwYQnRNEPXrQJvlNA9A3Da0EzgEA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:04 GMT
age: 42358
etag: "c843c5422499736a83a80c2b07475a8dbbb8860f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12555
Md5:    f20d5c4b208740dd4c737b9d95c0e1d0
Sha1:   c843c5422499736a83a80c2b07475a8dbbb8860f
Sha256: f8d048a2c911aaedfa53b7d6e134638e8c36db0700a874fe99e0d8f847970a1b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:26 GMT
age: 41736
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6376
Md5:    78b1389f425425d0450c94d900404dc4
Sha1:   53b12a8702f7c5b7cc697e2a24da824d9434be65
Sha256: 0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed