r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bcdebf7a2bad5db595e8a0c1abb2ddcb
249dda2fa5e37b8a8f3a8c797193bf0874b6eedc
9b43ec48b16f96449208a0094c4d660806a2a2d344b5862dbff4c393bf3f9f9f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B43EC48B16F96449208A0094C4D660806A2A2D344B5862DBFF4C393BF3F9F9F"
Last-Modified: Thu, 01 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16943
Expires: Thu, 01 Sep 2022 20:07:48 GMT
Date: Thu, 01 Sep 2022 15:25:25 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 01 Sep 2022 14:37:40 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -8Y5-7bHAUZ2QedvDf5T9G7np6ghhwW3LB5PIo3eMBpxWxv02mBBdw==
Age: 2865
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
date: Thu, 01 Sep 2022 01:15:17 GMT
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
etag: "742edb4038f38bc533514982f3d2e861"
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vLHgbZubKlAWcnZQRhAfh_HPaBPt-XCCAwWHOOhB17Ld8Br5LVtWWA==
age: 51009
X-Firefox-Spdy: h2
g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
301 Moved Permanently 259 B URL HTTP/1.1 g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6534bd712fed6e6f29ec67b965a237e2
47506721b282b4bed3b8c07bce0da54ffe5f388f
25f7276d49aa690091dd0772c9f91e7569e57a6c931ac997eb2951e8dc9d9ad9
GET /cc/auth.php?xjkyibtlgbdafke= HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 01 Sep 2022 15:25:24 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 259
Connection: keep-alive
Location: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Sep 2022 15:25:25 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7bd07d0126b4fc0a13a08fed8f993260
41c6f7d8c9683cafa0a927a84a324c8695475672
05827c303bd23fb4ee7587dfe43aa4dfb2e0b505727b9cf9c806d7a0ad368f95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "05827C303BD23FB4EE7587DFE43AA4DFB2E0B505727B9CF9C806D7A0AD368F95"
Last-Modified: Tue, 30 Aug 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21407
Expires: Thu, 01 Sep 2022 21:22:12 GMT
Date: Thu, 01 Sep 2022 15:25:25 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Thu, 01 Sep 2022 14:57:05 GMT
Expires: Thu, 01 Sep 2022 14:57:54 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UDB4hXlbwuU6P_MB7EUoFLPpiH9Gj1gqdEqeu2pL88L75HEHYKIgmg==
Age: 1700
ocsp.digicert.com/
200 OK 471 B IP
Hash 2eb022bbcb69557dc09477b624814e87
6030f2c630a01fbc027c887d31e696f84cc60c97
d7a508e276f0ca1b58b6af39720fb7ebb26fb38df50a159eb82d1d2542610b85
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 811
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Sep 2022 15:25:26 GMT
Last-Modified: Thu, 01 Sep 2022 15:11:55 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lBEZngY2CT0xX8vLeXC8pQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: BezW/YiNZ0ZToITibkufzLz+RsY=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5856d9c265d032d574d6d1c6d91d735c
f5f8cd36ce5debc4655817da8b0a37ba2f0c7033
22b3a9f9f3f9fe975b933d20cd17006b49c6a75950041a39d6d73a8544c13abf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Sep 2022 15:25:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10349
Expires: Thu, 01 Sep 2022 18:17:56 GMT
Date: Thu, 01 Sep 2022 15:25:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10349
Expires: Thu, 01 Sep 2022 18:17:56 GMT
Date: Thu, 01 Sep 2022 15:25:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10349
Expires: Thu, 01 Sep 2022 18:17:56 GMT
Date: Thu, 01 Sep 2022 15:25:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10349
Expires: Thu, 01 Sep 2022 18:17:56 GMT
Date: Thu, 01 Sep 2022 15:25:27 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bffab86-e623-4ccd-9297-981c9dc6e4cd.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bffab86-e623-4ccd-9297-981c9dc6e4cd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b0f6c541f6335bb709d2270147bd5aed
b691ef5e7a302e2678302818130a9637c3efbe3a
e63922331a4463519e6df77ae7a1ad3316a36e54dd03c00ff6b119ee3fa684c5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bffab86-e623-4ccd-9297-981c9dc6e4cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 79dc68ea-ea2e-4eab-bab9-1c89b0a955a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XjMSvHJ-oAMF6Jw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630ac0de-2370cf5363d5f308121f0ca4;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 01:11:58 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qAEve6mBQ9a1hr2fBR8xq42pxeG9Kjn4yWaMr4z4On46QC9R1K91pw==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 14:45:21 GMT
age: 2406
etag: "b691ef5e7a302e2678302818130a9637c3efbe3a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5b5a9a-050c-4a84-9e0d-dfa84795640f.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5b5a9a-050c-4a84-9e0d-dfa84795640f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6b2c036e67f8c39c136f6c69b0922eb1
98e27f0dafd7b1b49e159ee038b41a811096a2d0
9dc9e00e6f63a22dd85f54ba26326a9733f6c1d7a19c7b1636f14fca2722e6eb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5b5a9a-050c-4a84-9e0d-dfa84795640f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8009
x-amzn-requestid: 6d716dae-efa3-449a-a505-fb5f3d99c2df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XsvlaFEaoAMFwDw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630e92ef-708228ce7e1fb3cb770cb490;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 22:45:03 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Gwk8Z-MzgO1APlMgvdN3-5KGdQ2K4I959yy-YdbVUD5AOZTQ0mjYhQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 00:00:46 GMT
age: 55481
etag: "98e27f0dafd7b1b49e159ee038b41a811096a2d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfd1bafb-f92b-46dc-9f17-4df493cefb83.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfd1bafb-f92b-46dc-9f17-4df493cefb83.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ac4d5b101c9dc6a6f7e4bf252bfa9ca7
b844f3dcb14a2995644312406a80842e3f02a114
e81f08ce6d9c7670f6e291f3d6a674b624386bd550d5c364264c3ff8fb7c797a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfd1bafb-f92b-46dc-9f17-4df493cefb83.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10137
x-amzn-requestid: 7d5f19c4-7c9b-4aad-928c-bb44da795f1f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XaISzFY1IAMF-zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630720de-0ea5331041f0167a196f9820;Sampled=0
x-amzn-remapped-date: Thu, 25 Aug 2022 07:12:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: h1ELVJBwpf4d3Fbspah-2KCSXx08D8_ZAgcZZjQSJdkMIUmtNmGJOw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 04:59:05 GMT
age: 37582
etag: "b844f3dcb14a2995644312406a80842e3f02a114"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0198fd1f-b00c-442e-9184-8ce8ebf9593c.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0198fd1f-b00c-442e-9184-8ce8ebf9593c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba98f63d9bef7deebb9a8d1b3126d396
d97a8b0e4b4dbc60dfc9eb15ba28f68e8e3731ef
b8f6c1c6b34ec452a6aa3090c30ebf3a68cb3b4d45a7b134ed32e1959f4f0682
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0198fd1f-b00c-442e-9184-8ce8ebf9593c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10777
x-amzn-requestid: 2e9a081f-2ae4-49b9-b9d4-79cae2b7eae9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xv3kRFiJIAMFgNA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630fd2e7-2f9eec0b239ceb6d617431b6;Sampled=0
x-amzn-remapped-date: Wed, 31 Aug 2022 21:30:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: w9ACDg_Mxbl2GSEDeDAqdMlKjkCiMyWExvCUa2jHquaQy6U-4EJtbQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 31 Aug 2022 21:37:19 GMT
age: 64088
etag: "d97a8b0e4b4dbc60dfc9eb15ba28f68e8e3731ef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg
200 OK 17 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 12756903aaa74164feb5f8525398ca36
9fef9b071daea6793cbbdfe391254ac4326b1aa2
6d474a6d96aebfed43a4f6812f18a1be8d100c590f75eb0fbf4ec7277dd0c442
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16818
x-amzn-requestid: 6950a3c5-2cdc-4a21-854c-10d925e32ecd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XiYLvHRSIAMFotQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630a6d7e-6e98b9a77e592bd01afb1d97;Sampled=0
x-amzn-remapped-date: Sat, 27 Aug 2022 19:16:14 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3eBLhLH4APXLyj9kLHXNCFT9ccS_bnBp5INvMI93IFvOuBMERe_GgQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 13:35:58 GMT
age: 6569
etag: "9fef9b071daea6793cbbdfe391254ac4326b1aa2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79bea3b3-c558-48ed-979e-3282a56393da.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79bea3b3-c558-48ed-979e-3282a56393da.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0773269fad1678055c52b480b9e87750
456dbbf8f3dfcfd63aab4201a04efd20262b9385
6a65d7520e705c6c20ef97254ed1d6116daca506258368292c58f5f728987191
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79bea3b3-c558-48ed-979e-3282a56393da.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8550
x-amzn-requestid: 6a3fd299-a5ef-4069-b686-74356344d6d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XikiaFbaoAMFyaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630a8142-1b7fe4644a7045ff0284c401;Sampled=0
x-amzn-remapped-date: Sat, 27 Aug 2022 20:40:34 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3Nbc4LQ7c0pWsUkWOsDkvON4Kcy_irlBnWdODrmYLn56WFRvOJIjXw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 31 Aug 2022 18:08:08 GMT
age: 76639
etag: "456dbbf8f3dfcfd63aab4201a04efd20262b9385"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
404 Not Found 127 kB URL HTTP/1.1 g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (25333), with CRLF, LF line terminators
Size 127 kB (126868 bytes)
Hash 3e860654644f3eecab41b1a406bd1674
48aef2d6bd4d7e999323eaed02a9bc627971fb13
e9550be31c31d500eab90a760821e1a65bf9378cb2db838db304e47080990def
GET /cc/auth.php?xjkyibtlgbdafke= HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 01 Sep 2022 15:25:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
WPO-Cache-Status: not cached
WPO-Cache-Message: The request extension is not suitable for caching, In the settings, caching is disabled for matches for one of the current request's GET parameters
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://g2gesso.com.br/wp-json/>; rel="https://api.w.org/"
g2gesso.com.br/wp-content/et-cache/global/et-divi-customizer-global.min.css?ver=1661979893
200 OK 7.7 kB URL HTTP/1.1 g2gesso.com.br/wp-content/et-cache/global/et-divi-customizer-global.min.css?ver=1661979893
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (7717), with no line terminators
Hash ca22177a92e4ed812dad81a76d86cc16
43ab2f629f800a9a76dee80f473bc410b0378a8f
3079109ac501cd9d47bce51ecb11043c2fac795af170a3925e34184bd23f327d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/et-cache/global/et-divi-customizer-global.min.css?ver=1661979893 HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:27 GMT
Content-Type: text/css
Content-Length: 7717
Connection: keep-alive
Last-Modified: Wed, 31 Aug 2022 21:04:53 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/et-cache/10/et-core-unified-10.min.css?ver=1661984611
200 OK 7.7 kB URL HTTP/1.1 g2gesso.com.br/wp-content/et-cache/10/et-core-unified-10.min.css?ver=1661984611
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (7717), with no line terminators
Hash ca22177a92e4ed812dad81a76d86cc16
43ab2f629f800a9a76dee80f473bc410b0378a8f
3079109ac501cd9d47bce51ecb11043c2fac795af170a3925e34184bd23f327d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/et-cache/10/et-core-unified-10.min.css?ver=1661984611 HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:27 GMT
Content-Type: text/css
Content-Length: 7717
Connection: keep-alive
Last-Modified: Wed, 31 Aug 2022 22:23:31 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/cache/wpo-minify/1661979893/assets/wpo-minify-header-551b1660.min.js
200 OK 128 kB URL HTTP/1.1 g2gesso.com.br/wp-content/cache/wpo-minify/1661979893/assets/wpo-minify-header-551b1660.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65447)
Size 128 kB (127980 bytes)
Hash f1f3eb6ece9a8f20b23ec3d2d76ee1b2
c0a9ab11ec3d515ac5ce33c6e4916afb04114586
912be756fe5947eed30c7fcf07ae1a1474e9d06d7f01616a361884a5feeda8e1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/cache/wpo-minify/1661979893/assets/wpo-minify-header-551b1660.min.js HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:27 GMT
Content-Type: application/javascript
Content-Length: 127980
Connection: keep-alive
Last-Modified: Wed, 31 Aug 2022 21:04:53 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/cache/wpo-minify/1661979893/assets/wpo-minify-footer-99a91744.min.css
200 OK 141 kB URL HTTP/1.1 g2gesso.com.br/wp-content/cache/wpo-minify/1661979893/assets/wpo-minify-footer-99a91744.min.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65536), with no line terminators
Size 141 kB (140647 bytes)
Hash 68da6c57db12ae9a8038010cd173193d
e1ea4759eb07c5acbeda9a6b90c068bc901613e7
d6404b928a4f3d4d688fe172da8521eb2a0aa755216196f3eaabb9bd1f4fa264
GET /wp-content/cache/wpo-minify/1661979893/assets/wpo-minify-footer-99a91744.min.css HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:27 GMT
Content-Type: text/css
Content-Length: 140647
Connection: keep-alive
Last-Modified: Wed, 31 Aug 2022 21:04:55 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/cache/wpo-minify/1661979893/assets/wpo-minify-header-811e44b3.min.css
200 OK 212 kB URL HTTP/1.1 g2gesso.com.br/wp-content/cache/wpo-minify/1661979893/assets/wpo-minify-header-811e44b3.min.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65536), with no line terminators
Size 212 kB (212284 bytes)
Hash 3e5f93038c98fa8e1770c1d21162d7b9
487a13c0bf7edc3a2293e1feedb859526b8477d9
03fab63a8286825f7df564d58e11141b675148e25fbecacfb564c9a5bb43544a
GET /wp-content/cache/wpo-minify/1661979893/assets/wpo-minify-header-811e44b3.min.css HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:27 GMT
Content-Type: text/css
Content-Length: 212284
Connection: keep-alive
Last-Modified: Wed, 31 Aug 2022 21:04:56 GMT
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0df4349f922a424e3feb92b8037a644b
515b467c1248b527a30dd7b806cf421dd8c58ed5
d62b59f7ebdb3e7dd80e7c3373846612c7d6f5953bdb0511c50a6343f92896b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Sep 2022 15:25:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
g2gesso.com.br/wp-content/uploads/2020/01/Logotipo.png
200 OK 32 kB URL HTTP/1.1 g2gesso.com.br/wp-content/uploads/2020/01/Logotipo.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 300 x 198, 8-bit/color RGBA, non-interlaced\012- data
Hash 172c92f29a15cdd88df87e79374db423
dadaea467e073ad65b0cafccf78a2cf978657c43
6d1b4bc2466f9f1b9a8ec2cd0a1c4de2e33cf89a89ff6c71f65726cf9650c41e
GET /wp-content/uploads/2020/01/Logotipo.png HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: image/png
Content-Length: 31872
Connection: keep-alive
Last-Modified: Thu, 16 Jan 2020 13:08:35 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/uploads/2020/01/home-icone.png
200 OK 1.1 kB URL HTTP/1.1 g2gesso.com.br/wp-content/uploads/2020/01/home-icone.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash a901e5e59103c4e36eb38e7fc0f57808
8cb7ac92002e692547cad5b932e9ad2d2fc73ea1
7992745b4f46e498f9bca9841d7be298cd9241edcf37f993c67d2cea1d5cf4b4
GET /wp-content/uploads/2020/01/home-icone.png HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: image/png
Content-Length: 1059
Connection: keep-alive
Last-Modified: Fri, 19 Nov 2021 12:00:53 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/uploads/2020/01/favicon.png
200 OK 42 kB URL HTTP/1.1 g2gesso.com.br/wp-content/uploads/2020/01/favicon.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced\012- data
Hash c2b303087324ca48eff297e4f25c4919
f4a96630e402e1a492839e47b94bef319972d273
9c3f717d630c9a7766a23a0778e06ebd80efffcb599c3495962e6e052e64c060
GET /wp-content/uploads/2020/01/favicon.png HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: image/png
Content-Length: 42075
Connection: keep-alive
Last-Modified: Thu, 16 Jan 2020 17:03:19 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/uploads/2020/01/empresa-icone.png
200 OK 1.5 kB URL HTTP/1.1 g2gesso.com.br/wp-content/uploads/2020/01/empresa-icone.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 7cf4faf67d85abc61da2106a36e47657
31a1aac592c600459b79bbe7292be1d960d3a690
a42770de0d6f1b6d2067edcdeded1cb797925cf906a51c521a1961556ea00175
GET /wp-content/uploads/2020/01/empresa-icone.png HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: image/png
Content-Length: 1528
Connection: keep-alive
Last-Modified: Fri, 19 Nov 2021 12:00:55 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/et-cache/notfound/et-divi-dynamic-late.css
200 OK 89 kB URL HTTP/1.1 g2gesso.com.br/wp-content/et-cache/notfound/et-divi-dynamic-late.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (30324)
Hash 1b2a82f596528e8744a6cb7d0d1ad158
3f3fbee758177d52ae78f4900be196c52c8d37e3
0037f97ff9bbd153740407ab9d482fbdc3c5976d5a90bb871ab73463c0294728
GET /wp-content/et-cache/notfound/et-divi-dynamic-late.css HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: text/css
Content-Length: 88748
Connection: keep-alive
Last-Modified: Wed, 31 Aug 2022 21:04:54 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/uploads/2020/01/Foto-1.jpg
200 OK 227 kB URL HTTP/1.1 g2gesso.com.br/wp-content/uploads/2020/01/Foto-1.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5.1 Windows, datetime=2015:11:17 10:48:34], baseline, precision 8, 672x492, components 3\012- data
Size 227 kB (227131 bytes)
Hash 05c24c3c90d7565366b56b906d6f71cf
deb0ddd424df696c15e93c950160dbb9ff596de3
c14c714ca5d6faa9b2ec1eba133a799942b44c7d3776a20801104c82387874aa
GET /wp-content/uploads/2020/01/Foto-1.jpg HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: image/jpeg
Content-Length: 227131
Connection: keep-alive
Last-Modified: Thu, 16 Jan 2020 14:02:14 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/plugins/wordpress-whatsapp-support/assets/fonts/wws-fonts.ttf
200 OK 2.8 kB URL HTTP/1.1 g2gesso.com.br/wp-content/plugins/wordpress-whatsapp-support/assets/fonts/wws-fonts.ttf
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, wws-fonts \012- data
Hash 6f9070b8779e1f36a1029833421c10b3
a05968e20de19917f356598272ed8e3b48d37cda
71d3429a63b8d94d667bb58bbb3ab2689fd4e68e1bb32af565fe322377b8be06
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wordpress-whatsapp-support/assets/fonts/wws-fonts.ttf HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/wp-content/cache/wpo-minify/1661979893/assets/wpo-minify-header-811e44b3.min.css
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: font/ttf
Content-Length: 2804
Connection: keep-alive
Last-Modified: Sun, 21 Jun 2020 03:44:10 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/themes/Divi/core/admin/fonts/modules/base/modules.ttf
200 OK 6.2 kB URL HTTP/1.1 g2gesso.com.br/wp-content/themes/Divi/core/admin/fonts/modules/base/modules.ttf
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, ETmodules \012- data
Hash 51ae8a67713e8dff77ab0903532caed2
388212f5009137d58ed93aeccfd075cb7e522166
7c51f9fb51890524ad066fb1b4b69d7dc2bd923e182eb4df6d880ea593d2ce4e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Divi/core/admin/fonts/modules/base/modules.ttf HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/wp-content/cache/wpo-minify/1661979893/assets/wpo-minify-header-811e44b3.min.css
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: font/ttf
Content-Length: 6228
Connection: keep-alive
Last-Modified: Fri, 21 Jan 2022 09:00:48 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/uploads/2020/01/Foto-2.jpg
200 OK 197 kB URL HTTP/1.1 g2gesso.com.br/wp-content/uploads/2020/01/Foto-2.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5.1 Windows, datetime=2015:11:17 10:46:30], baseline, precision 8, 672x492, components 3\012- data
Size 197 kB (196772 bytes)
Hash b5a7a9518eb708618a0ffbcc2a31273d
925aa17ca981dccdc0652ea9524e7964f53b19aa
56e336d8fae988c3daf4b4a1293bd520804b84b31e10578fff36c90f3a325313
GET /wp-content/uploads/2020/01/Foto-2.jpg HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: image/jpeg
Content-Length: 196772
Connection: keep-alive
Last-Modified: Thu, 16 Jan 2020 14:02:16 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/uploads/2020/01/servi%C3%A7os-icone.png
200 OK 1.3 kB URL HTTP/1.1 g2gesso.com.br/wp-content/uploads/2020/01/servi%C3%A7os-icone.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 23357f27f44678baa1205da2e73789db
d67ac3de33ddf11c1f0c1c2f284ad15cde90e754
e62899ea0bb6ff767a6c4eaa5b66c2fbbfe147da35ddea75bc410c2eba2ee601
GET /wp-content/uploads/2020/01/servi%C3%A7os-icone.png HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: image/png
Content-Length: 1323
Connection: keep-alive
Last-Modified: Fri, 19 Nov 2021 12:00:52 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.ttf
200 OK 92 kB URL HTTP/1.1 g2gesso.com.br/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.ttf
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, modules \012- data
Hash de27b3e66b2f8017e000aa9d8d24d60e
e6d716de8f35ba6daf55d57e7fe0ed8d8e50f1f7
d201a2c3118a00c82cc48e89815f5139f23956bbe248107dcf522acc77b97c09
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Divi/core/admin/fonts/modules/all/modules.ttf HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/wp-content/cache/wpo-minify/1661979893/assets/wpo-minify-header-811e44b3.min.css
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: font/ttf
Content-Length: 92400
Connection: keep-alive
Last-Modified: Fri, 21 Jan 2022 09:00:48 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/uploads/2020/01/contato-icone.png
200 OK 4.7 kB URL HTTP/1.1 g2gesso.com.br/wp-content/uploads/2020/01/contato-icone.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 30, 8-bit/color RGBA, interlaced\012- data
Hash b42ba2fb4101ac938355df77d8f07f1b
3e87f67395292bb8ecc920feedaca0fe5a66ad81
9051467963278460d74ff4a51b43dc4603bcda6e3fcee343e19444cbafbf4471
GET /wp-content/uploads/2020/01/contato-icone.png HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: image/png
Content-Length: 4655
Connection: keep-alive
Last-Modified: Fri, 17 Jan 2020 12:08:49 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/plugins/revslider/public/assets/assets/dummy.png
200 OK 68 B URL HTTP/1.1 g2gesso.com.br/wp-content/plugins/revslider/public/assets/assets/dummy.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 2a637d3d825673c0e3462fa4ed9a1c5c
81668d396da22832d75a986407ff10035e0d5899
69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7
GET /wp-content/plugins/revslider/public/assets/assets/dummy.png HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: image/png
Content-Length: 68
Connection: keep-alive
Last-Modified: Wed, 31 Aug 2022 16:05:36 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/uploads/2020/01/Foto-3.jpg
200 OK 289 kB URL HTTP/1.1 g2gesso.com.br/wp-content/uploads/2020/01/Foto-3.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5.1 Windows, datetime=2015:11:17 10:48:59], baseline, precision 8, 672x492, components 3\012- data
Size 289 kB (288682 bytes)
Hash 66f3d93d7c7adfa552367ca5a0604099
c7e13910918598e9b3251625e38a28b7beaf5360
d901159cf192bbabdf7c86644eb7270421ef86e5abb9e9d00f834c9da7288be7
GET /wp-content/uploads/2020/01/Foto-3.jpg HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: image/jpeg
Content-Length: 288682
Connection: keep-alive
Last-Modified: Thu, 16 Jan 2020 14:02:18 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/uploads/2020/01/texturaazul.jpg
200 OK 285 kB URL HTTP/1.1 g2gesso.com.br/wp-content/uploads/2020/01/texturaazul.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1200, components 3\012- data
Size 285 kB (285280 bytes)
Hash b83c0cb9c92063c293b95e23281aef1b
558f64a16c23d61c1669c7aba007af43a3dcd243
04b8ad1ee03d56bcf056c163b7dfe215debd1809941ee16300b3cd1f56629682
GET /wp-content/uploads/2020/01/texturaazul.jpg HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: image/jpeg
Content-Length: 285280
Connection: keep-alive
Last-Modified: Thu, 16 Jan 2020 13:26:19 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/uploads/2020/01/Foto-4.jpg
200 OK 241 kB URL HTTP/1.1 g2gesso.com.br/wp-content/uploads/2020/01/Foto-4.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5.1 Windows, datetime=2015:11:17 10:46:46], baseline, precision 8, 672x492, components 3\012- data
Size 241 kB (240927 bytes)
Hash 6df13f29c22f6f3cdcf63d4a89b3d3b6
db92a9053b670c0048c0fef15532f1c6ddc32c0c
cbc56ee6145ac1a1c9cd34030881e2b724c65ff32736bc65ac378707149b7ed1
GET /wp-content/uploads/2020/01/Foto-4.jpg HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:28 GMT
Content-Type: image/jpeg
Content-Length: 240927
Connection: keep-alive
Last-Modified: Thu, 16 Jan 2020 14:02:20 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/cache/wpo-minify/1661979893/assets/wpo-minify-footer-38103d36.min.js
200 OK 835 kB URL HTTP/1.1 g2gesso.com.br/wp-content/cache/wpo-minify/1661979893/assets/wpo-minify-footer-38103d36.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (45108), with CRLF line terminators
Size 835 kB (834593 bytes)
Hash 3b7ce50cc88b1285eb3758ed3d235075
8bf6667da28ea85f122f4132ef2f3c5e0b6b3e6d
22ec90c35e79ad882db94135248b450c0949db4296937b24d0a061b88fa0ac23
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/cache/wpo-minify/1661979893/assets/wpo-minify-footer-38103d36.min.js HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:27 GMT
Content-Type: application/javascript
Content-Length: 834593
Connection: keep-alive
Last-Modified: Wed, 31 Aug 2022 21:04:54 GMT
Accept-Ranges: bytes
g2gesso.com.br/favicon.ico
200 OK 23 kB URL HTTP/1.1 g2gesso.com.br/favicon.ico
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel\012- data
Hash 1ae9bbcddbbbee52f18c4465822b1627
7171df04afd05dde861ebb6b04f36aa20680e505
8a07543b9c241cc247c4b3caf3c29ba323e12a44103672e88890a8a7152eeb43
GET /favicon.ico HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:29 GMT
Content-Type: image/x-icon
Content-Length: 23090
Connection: keep-alive
Last-Modified: Thu, 16 Jan 2020 11:51:08 GMT
Accept-Ranges: bytes
g2gesso.com.br/wp-content/uploads/2020/01/Banner01-1.jpg
200 OK 284 kB URL HTTP/1.1 g2gesso.com.br/wp-content/uploads/2020/01/Banner01-1.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1500x464, components 3\012- data
Size 284 kB (283570 bytes)
Hash e85e9406e50de4ef3e05059d1c6407c5
79e1372d777bd7a200cadea40ca372abbfa9814b
5e5e7ee7213c0280cd00eb23fc7fbe368fbe767d8b0a4515fa4284d9239a044e
GET /wp-content/uploads/2020/01/Banner01-1.jpg HTTP/1.1
Host: g2gesso.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://g2gesso.com.br/cc/auth.php?xjkyibtlgbdafke=
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-non-necessary=yes; _ga=GA1.3.1137916789.1662045737; _gid=GA1.3.1994273032.1662045737
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Sep 2022 15:25:30 GMT
Content-Type: image/jpeg
Content-Length: 283570
Connection: keep-alive
Last-Modified: Thu, 16 Jan 2020 13:30:36 GMT
Accept-Ranges: bytes
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4a31025-b077-4937-93a3-a0669697b0ee.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4a31025-b077-4937-93a3-a0669697b0ee.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 043263cdba253c3eb4bfa33c95e8ca21
6d814e56d87e2579e51139759fa7dfb8195a6529
9c7cf679c9a6a0d0a2c75a85b13d8407a5e0fe2448d73fced51b45a3e701e9c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4a31025-b077-4937-93a3-a0669697b0ee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8044
x-amzn-requestid: 8ea16c8b-f0aa-4ce9-a99d-8e59c51ffb8d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xv3j7Ge9IAMFQBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630fd2e5-6762d09b569221944f9b7870;Sampled=0
x-amzn-remapped-date: Wed, 31 Aug 2022 21:30:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tZWKpWZnFUVhefoWK-AwAYKOsmAcMhTmPXEyWp0BJPKfhgooGpI6xQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 31 Aug 2022 21:52:58 GMT
age: 63156
etag: "6d814e56d87e2579e51139759fa7dfb8195a6529"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dl.honaramiz.com/frog.zip
200 OK 0 B URL HTTP/1.1 dl.honaramiz.com/frog.zip
IP
ASN #35372 Mizban Dadeh Iranian Co. (Ltd)
GET /frog.zip HTTP/1.1
Host: dl.honaramiz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Type: application/zip
Last-Modified: Thu, 26 Aug 2021 16:27:44 GMT
Accept-Ranges: bytes
Content-Length: 81577594
Date: Thu, 01 Sep 2022 15:25:26 GMT
162.214.69.46
23.36.77.32
93.184.220.29
62.60.160.80
0.0.0.0