r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ed951622549ed76959631f8a1bf497b
682b2dd2a72190510e3fa7bdb0c0c6f25a322dfb
86f5e5ae2da408a899d16c83b7ca441033ac0c30062cd29f2db1b1b5be666746
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "86F5E5AE2DA408A899D16C83B7CA441033AC0C30062CD29F2DB1B1B5BE666746"
Last-Modified: Sat, 19 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7018
Expires: Mon, 21 Nov 2022 20:26:09 GMT
Date: Mon, 21 Nov 2022 18:29:11 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 4843de3bf95411e6aa89834def44bb86
1f1882351ac63fba73a22014382f69df5e02ec96
1e6ed1df02f8fa6c89ddca66f7c9981f8a06127d7ec90b503703137e823bb4b7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5342
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 18:29:11 GMT
Last-Modified: Mon, 21 Nov 2022 17:00:09 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1cee7787feebac18f9eca273e56e3741
3a7dac544172921e24c2a1701beef5079b21d01b
79ff4a450c749d64e116c00ca3b00d40e968906c5c3881d6eeb2dc6374a4c858
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "79FF4A450C749D64E116C00CA3B00D40E968906C5C3881D6EEB2DC6374A4C858"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17465
Expires: Mon, 21 Nov 2022 23:20:16 GMT
Date: Mon, 21 Nov 2022 18:29:11 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 21 Nov 2022 18:09:17 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1194
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: hDsOSRJw5qg+9iwgmvZpXRVnIoUhnn2u886gRIF7N6c2Fb6mA+68OFP+Y3tYiwuaq/RTsNP5X+g=
x-amz-request-id: RRZKMZEPKYAYXR7D
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 21 Nov 2022 17:42:12 GMT
age: 2819
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 21 Nov 2022 18:29:11 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 21 Nov 2022 18:08:53 GMT
cache-control: public,max-age=3600
age: 1218
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 2db0ebb9efcf3be3c92f23b61de5c065
dd830565723f18a7944c26d24b0fb142d06a71a5
8615316184c4d1d64db923a5364363bbb3d25e146a042c5fbd5bf0cfcec8effb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1156
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 18:29:11 GMT
Last-Modified: Mon, 21 Nov 2022 18:09:55 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
madeirasemsaopaulo.com.br/vweb3/
200 OK 34 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3471)
Hash 122017d9d1bf4196109a94d7678c4d0f
237cace402ae29d97ea71b5d6d88122af30a47fa
3572cf127e3e9dc84f4c110440beb3ca33603ffabc8df63a054841f1f6405e7b
Analyzer Verdict Alert openphish Canada Post
fortinet Phishing
GET /vweb3/ HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:51 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 33595
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Accept-Ranges: none
Content-Encoding: gzip
X-UA-Compatible: IE=Edge,chrome=1
Pragma: no-cache
madeirasemsaopaulo.com.br/vweb3/index_files/beacon.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/beacon.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/beacon.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:51 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/jCarousel.min.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/jCarousel.min.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/jCarousel.min.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:51 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0DmC6CMgZY53JiQnNXlCtQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 2DU5s/9gxBVZceWUPgGs/m87IPA=
madeirasemsaopaulo.com.br/vweb3/index_files/insight.min.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/insight.min.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/insight.min.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:51 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/uwt.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/uwt.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/uwt.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:51 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/fbevents.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/fbevents.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/fbevents.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:51 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/satelliteLib-f2fc6f00da802a0747b6ffed3c12e3931bfca496.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/satelliteLib-f2fc6f00da802a0747b6ffed3c12e3931bfca496.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/satelliteLib-f2fc6f00da802a0747b6ffed3c12e3931bfca496.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:51 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/EX69ea3e2d8d9a41d99a46ba219e259885-libraryCode_source.min.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/EX69ea3e2d8d9a41d99a46ba219e259885-libraryCode_source.min.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/EX69ea3e2d8d9a41d99a46ba219e259885-libraryCode_source.min.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:51 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/lib/js/jquery.mask.min.js
200 OK 3.4 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/lib/js/jquery.mask.min.js
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (537)
Hash d5d65401a966450bba86701bf61f1d46
8676138aa64386ea13c79768df4f6f82b2840bfe
1cc9eca72fc0a7ef7fb5fc462fe472b538607dc85608848b6625792c16d47b75
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/lib/js/jquery.mask.min.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: application/javascript
Content-Length: 3397
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 24 May 2018 02:53:56 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:12 GMT
madeirasemsaopaulo.com.br/vweb3/lib/js/Acc_Carding.js
200 OK 386 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/lib/js/Acc_Carding.js
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with CRLF line terminators
Hash f5a7acf3eec77f32c942861fae07b133
f7d76327bb03621f2f1395459b64cfe5966823be
b260b3274d6f9c4a6dd6b66cd852b44c4c31591a6f9be0bbf5fdcc8723904506
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/lib/js/Acc_Carding.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: application/javascript
Content-Length: 386
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Sat, 10 Apr 2021 15:20:26 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:12 GMT
madeirasemsaopaulo.com.br/vweb3/lib/js/phone.js
200 OK 373 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/lib/js/phone.js
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with CRLF line terminators
Hash dd76c96542400e78eaad883e49525d07
a703e5bd09a67ad4c32d6141d3dfff8a027a04d2
9eca03685dfb8a3e011bbbaeed8feeba6b07e7d6441b152d7073dcc4dc0b31c1
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/lib/js/phone.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: application/javascript
Content-Length: 373
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Sat, 10 Apr 2021 15:20:04 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:12 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/js
200 OK 90 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/js
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (2127)
Hash 4f8a9eff4cf2d8dc4af57a1f055644b5
a010cec787b68e58cc403b89813f6d330ab575f5
06453c0716cf1d0af13ba99b2362b0f60cfdd4589b7c2c5a64d11ff8e78c2b65
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:51 GMT
Content-Length: 90278
Connection: keep-alive
Vary: X-Proxy-Provider,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 21 Dec 2022 18:29:12 GMT
X-UA-Compatible: IE=Edge,chrome=1
madeirasemsaopaulo.com.br/vweb3/lib/js/jquery-latest.min.js
200 OK 33 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/lib/js/jquery-latest.min.js
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (32086)
Hash f3694a0c3eb95b7f622c6f0b2aeb035d
fa274050ab496ddf6d02afe98007cbf70a45d718
6431680197d8b8dc47efd8585e04ef5931065c9ae17811e1f4115a2d2225f6fd
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/lib/js/jquery-latest.min.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: application/javascript
Content-Length: 33173
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 24 May 2018 02:53:20 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:12 GMT
madeirasemsaopaulo.com.br/vweb3/lib/js/zip.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/lib/js/zip.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/lib/js/zip.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/lib/js/txt-crypt.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/lib/js/txt-crypt.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/lib/js/txt-crypt.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
www.googletagmanager.com/gtag/js?id=DC-9852050&l=dataLayer&cx=c
302 Found 276 B URL HTTP/1.1 www.googletagmanager.com/gtag/js?id=DC-9852050&l=dataLayer&cx=c
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 195c3c88bfff9c9db5bd8587f58dccf0
88f4af4b1586b5c887fe0c25beed5f8b23187ace
6aa0716988059b4a11ad9455a87a1e2bebd82fd25961096e1d6131485c05ef56
GET /gtag/js?id=DC-9852050&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/
HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=DC-9852050&l=dataLayer&cx=c
Cross-Origin-Resource-Policy: cross-origin
Date: Mon, 21 Nov 2022 18:29:12 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 276
X-XSS-Protection: 0
madeirasemsaopaulo.com.br/vweb3/lib/js/dob.js
200 OK 367 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/lib/js/dob.js
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with CRLF line terminators
Hash 45958568252ebd934d184bf801a05913
790e5fa55017827efa6fc6b345da548cda7de82a
9002fd37b84088e20a05f798afd910d216a644001ed6bda9b6da82e1b65a414a
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/lib/js/dob.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: application/javascript
Content-Length: 367
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Sun, 14 Feb 2021 05:45:12 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:12 GMT
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 662c6190c63609f87a23660fc808a650
a4178dd92d6f8a4f7c4da846a08d4104575f3636
93a8fd2af027f09640a8f5c3e2f10603d8b7aff4c74bc274cdbea7deeb396f3c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 18:29:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=DC-9852050&l=dataLayer&cx=c
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=DC-9852050&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (1921)
Hash 2c90421ff874b9581c6f1500e399e52b
5ea2bf094de4800432dc9cecce607db3f79ab51f
547996a0b995a1c29dcbed3e57c3450215bcda30a171dd0146cd6125bb6dcd19
GET /gtag/js?id=DC-9852050&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://madeirasemsaopaulo.com.br/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 21 Nov 2022 18:29:12 GMT
expires: Mon, 21 Nov 2022 18:29:12 GMT
cache-control: private, max-age=900
last-modified: Mon, 21 Nov 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44244
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 662c6190c63609f87a23660fc808a650
a4178dd92d6f8a4f7c4da846a08d4104575f3636
93a8fd2af027f09640a8f5c3e2f10603d8b7aff4c74bc274cdbea7deeb396f3c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 18:29:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
madeirasemsaopaulo.com.br/vweb3/index_files/normalize.css
200 OK 2.6 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/normalize.css
IP
ASN #53057 RedeHost Internet Ltda.
Hash 74378511f6b8997ed5427f8d8c3215ed
33e1d4013d4000c52f7946eca708e26b0564425b
bfb77463d6961548a732d93d17a68356b11ed31b412f005a237cba586ac980b7
GET /vweb3/index_files/normalize.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: text/css
Content-Length: 2555
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:08 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:12 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/js(1)
200 OK 90 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/js(1)
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (2127)
Hash f7dbefbdd69deab37fa1c2e07673f78a
6f4cc5415398f225cfaa070a491f713706b991c8
dc7d43d665ea2e41e24d9f45720f4e6eff16018ee4477997e6f3fda5c78dd918
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/js(1) HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Length: 90248
Connection: keep-alive
Vary: X-Proxy-Provider,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:08 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 21 Dec 2022 18:29:12 GMT
X-UA-Compatible: IE=Edge,chrome=1
www.googletagmanager.com/gtag/js?id=AW-1011747518&l=dataLayer&cx=c
302 Found 279 B URL HTTP/1.1 www.googletagmanager.com/gtag/js?id=AW-1011747518&l=dataLayer&cx=c
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 9f9ff098b888328b10ae92fb60d02a44
c0eea5c670cdbbce883bfe2bdbc50f024dab7470
ae97003da91d752145144cce1abedcc3a19b6adda26fe15c9d26d3d85f8954a2
GET /gtag/js?id=AW-1011747518&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/
HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=AW-1011747518&l=dataLayer&cx=c
Cross-Origin-Resource-Policy: cross-origin
Date: Mon, 21 Nov 2022 18:29:12 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 279
X-XSS-Protection: 0
madeirasemsaopaulo.com.br/vweb3/index_files/foundation.min.css
200 OK 20 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/foundation.min.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (65536), with no line terminators
Hash ccc9968cece1d1d396a45ba27e8fbde4
3441a316c56c9488618b7c7ea14f650303edfce0
f587714e0fe3391f47bb7d86bef8b6c1f4ce19e022356d316801a63fe89d5628
GET /vweb3/index_files/foundation.min.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: text/css
Content-Length: 19575
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:08 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:12 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/jquery-ui.min.css
200 OK 7.8 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/jquery-ui.min.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (29137)
Hash 99616e4e8420e81dc43eae2634a8643f
83ca958e63afdca6912218ec29aff2cb57fb2a61
4f1da225fcdda32a2e9372a0570b4e63aafae28d17ca673e4d0a4d7778a5d9b6
GET /vweb3/index_files/jquery-ui.min.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: text/css
Content-Length: 7841
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:12 GMT
fonts.googleapis.com/css?family=Roboto:400,100,100italic,300,300italic,400italic,500,500italic,700,700italic,900,900italic
200 OK 1.1 kB URL HTTP/1.1 fonts.googleapis.com/css?family=Roboto:400,100,100italic,300,300italic,400italic,500,500italic,700,700italic,900,900italic
IP
Hash 17cce38776875efe998ecea591cd7906
7cfadcda2073ada8bc5889ed948193ebbb8ef1c3
a6b4a0dfc642602da0ef34ac6ad86e09b655cecd6fc7eda814754621d683b993
GET /css?family=Roboto:400,100,100italic,300,300italic,400italic,500,500italic,700,700italic,900,900italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 21 Nov 2022 18:29:12 GMT
Date: Mon, 21 Nov 2022 18:29:12 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
madeirasemsaopaulo.com.br/vweb3/index_files/vpo.css
200 OK 9.1 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/vpo.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (303), with CRLF line terminators
Hash e4b7e1b130ab8426c8e107545bd8326e
991d2b599b268f1edb63b500bd8f04415d43e6f5
f1a768c7f291280d8a83a7f1971b8eb107cc1f597b6a0c9f0d9a8d8310241113
GET /vweb3/index_files/vpo.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: text/css
Content-Length: 9113
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:12 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/cwc.css
200 OK 21 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/cwc.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (65536), with no line terminators
Hash de20d83f8a24a360453ac9a107895148
40bf49cbf339e3279a285b07a856f17b033f7b1f
b76a62af050f845bdc327582e56149735d3ab93e5f332bc4d52172254b6192be
GET /vweb3/index_files/cwc.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: text/css
Content-Length: 20934
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:12 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/slick_slider.css
200 OK 2.3 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/slick_slider.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with CRLF line terminators
Hash a74c2f2e918bac8d0da49e8eb4448f13
50f20a745abd6657987cabdd8e358d1b7d61d526
692a26acc43991f14b5de4e1dffbfee70d46f5ccfa1dada010e2391097478c3c
GET /vweb3/index_files/slick_slider.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: text/css
Content-Length: 2290
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:12 GMT
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8796b1bba5e0df458c07179adea64173
b3c3f64718de099805a200e156774ea356a08132
ae32033094ed99df37e4537b91ec3d52a8fd2f0d2f538e3c81901e1f9c29a0a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 18:29:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
madeirasemsaopaulo.com.br/vweb3/index_files/extendstyles.css
200 OK 18 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/extendstyles.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (612), with CRLF line terminators
Hash bf1e8524ece5282aaf16a63ffd660dfc
5d8470fb68e993c7bba1b18ae4ae6b4151f0e30c
dfc2fdd5759bb56c12839e8340c041e5c57519e3838ee875119d2dd7615f0b33
GET /vweb3/index_files/extendstyles.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: text/css
Content-Length: 17927
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:12 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/tony.css
200 OK 6.9 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/tony.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (546), with CRLF line terminators
Hash ab3aa6d4f6fd821c4d031e7c2f121041
405f435694ffb4b56ea58f3688cf2be129496259
f3e21b75d9c068117b7dc9345121d05cd7ad51ebc5c8ee4b69999bcb1f811b3b
GET /vweb3/index_files/tony.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: text/css
Content-Length: 6877
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:12 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/responsive.css
200 OK 20 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/responsive.css
IP
ASN #53057 RedeHost Internet Ltda.
File type Unicode text, UTF-8 (with BOM) text, with very long lines (449), with CRLF line terminators
Hash ed2024065b66cacbb16248e12e2931cb
997c1cb8db1cf9f870763fe00f741f9512a1dfd6
3dd9e4eecc941e03c1233021f4f40971658f0c36b21c4d68e6d28db2d7e57518
GET /vweb3/index_files/responsive.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: text/css
Content-Length: 19926
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:12 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/aaron.css
200 OK 7.6 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/aaron.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (561), with CRLF line terminators
Hash ff2fdaf2232eda160921a7bff53bd4dd
d0a160d74a50cf161a34e9510c83851ff69c3aa3
a18a145550084e4398463d4b83ed36f8ff1635e534a91d4800bdfd5fa65b8cff
GET /vweb3/index_files/aaron.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: text/css
Content-Length: 7647
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:12 GMT
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8796b1bba5e0df458c07179adea64173
b3c3f64718de099805a200e156774ea356a08132
ae32033094ed99df37e4537b91ec3d52a8fd2f0d2f538e3c81901e1f9c29a0a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 18:29:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
madeirasemsaopaulo.com.br/vweb3/index_files/kirk.css
200 OK 2.8 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/kirk.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with CRLF line terminators
Hash 82b0d555daa2f5406625fae2ab1eb15f
e05fd229c8bc710fc8e4139b7d5167796ee94d65
3b50fc6e26ae3ac6e4a2dd9200d4c049505ff50557c47e5f560d162dbb6c311f
GET /vweb3/index_files/kirk.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: text/css
Content-Length: 2768
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:13 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/donald.css
200 OK 783 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/donald.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with CRLF line terminators
Hash dc8cbbba80f971edfc8bb0a73e91b54b
48036c786d050de685e67fa27ebdc77886a1a2c4
a4b7b65cd61421da1080c307c7cff87bebb0aadb5d27affe99da539640bc98c0
GET /vweb3/index_files/donald.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:52 GMT
Content-Type: text/css
Content-Length: 783
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:13 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/michael.css
200 OK 7.3 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/michael.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (404), with CRLF line terminators
Hash bb607632b6c94ffd8c2f072320363c03
cab1a462882b388342a0610cc24c06570226d815
e20439042ebdeb2ef1af727a864aad73b0fe665add4a76d6e03cc9c4ff3c1a4a
GET /vweb3/index_files/michael.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/css
Content-Length: 7346
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:13 GMT
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10368
Expires: Mon, 21 Nov 2022 21:22:01 GMT
Date: Mon, 21 Nov 2022 18:29:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10368
Expires: Mon, 21 Nov 2022 21:22:01 GMT
Date: Mon, 21 Nov 2022 18:29:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10368
Expires: Mon, 21 Nov 2022 21:22:01 GMT
Date: Mon, 21 Nov 2022 18:29:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10368
Expires: Mon, 21 Nov 2022 21:22:01 GMT
Date: Mon, 21 Nov 2022 18:29:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10368
Expires: Mon, 21 Nov 2022 21:22:01 GMT
Date: Mon, 21 Nov 2022 18:29:13 GMT
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/jquery.autocomplete.css
200 OK 442 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/jquery.autocomplete.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with CRLF line terminators
Hash ccc7b222999c58c4de3613b659ce35e2
2f0b468deb584675b529dd610ab0981d8679da18
6b7aaa230eae81697aff34caa6f8930473f7a0f5d7773670d738ed7a9f5329f8
GET /vweb3/index_files/jquery.autocomplete.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/css
Content-Length: 442
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:13 GMT
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23dd0640-fd46-469c-ae06-acb832cc4160.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23dd0640-fd46-469c-ae06-acb832cc4160.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 901093397261ec8888c61a6c88f8b7cd
1f07e8182159f68134776366e0bea78a130c5b85
9982e83a02d1595431c397a00a0a339067681fdbcb7538ca40ffd7138c7aa9f0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23dd0640-fd46-469c-ae06-acb832cc4160.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11271
x-amzn-requestid: 144705ac-0cc1-46ba-a6a9-3942bf3c9433
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b61qlFriIAMF7oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637a9ca9-27e45603577195a2769b3fc3;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 21:31:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Qql-MEI9tkdxS-lGdnkBCB8h39ZgJBi7ODA2TMUYn8kqEjP8AjMCZg==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 f3ac324bf05099849ebda59e8136db0e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 20 Nov 2022 21:50:50 GMT
age: 74303
etag: "1f07e8182159f68134776366e0bea78a130c5b85"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
madeirasemsaopaulo.com.br/vweb3/index_files/storeEcommerce.css
200 OK 2.2 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/storeEcommerce.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with CRLF line terminators
Hash 2f8fb9594d46d8d2b6217ec823395cf1
5f1b8b90ef252a9ff815471f5d626f3d8c8f8b8b
168dde6bbad20561888b871f86758ec21bb975bc29f4edac89f201c64dd2487f
GET /vweb3/index_files/storeEcommerce.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/css
Content-Length: 2205
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:13 GMT
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F032a7640-4af2-49ea-b184-de5b0ed996a4.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F032a7640-4af2-49ea-b184-de5b0ed996a4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 79ccaf63b8e37223509518f540b26f54
fd48bd3737d35bc53a0ec4593c8769ea9fe1cc71
950ae082472515d39c9e3440cee399376e99840651ff04c4d2581951e44163de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F032a7640-4af2-49ea-b184-de5b0ed996a4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9653
x-amzn-requestid: 43209d37-210a-4339-a6ba-9fb26349e6fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b3jZkHXqoAMFZog=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63794c3d-66898b374a984c1b409c28ad;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 21:35:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: eswxmUa59R-4pum8RNXKrKJg6g6tn17CnOpe4LZUPgEbvxfp9MzeDg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 20 Nov 2022 21:41:31 GMT
age: 74862
etag: "fd48bd3737d35bc53a0ec4593c8769ea9fe1cc71"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e2c726b-e91a-4cf6-95b8-c267e110416c.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e2c726b-e91a-4cf6-95b8-c267e110416c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a9e0f5c07511d0f6ad0f2441db92797d
2dcc6187d7173ce741975ad4ec24435c9dcb0880
3c57bf58bab9d54dd152eb0260a203b1cb201a9e2d960f25a0cea685b539ea04
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e2c726b-e91a-4cf6-95b8-c267e110416c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5342
x-amzn-requestid: e396cea4-ddae-4b88-a73a-ceafb1e11620
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0b91EMLoAMFYYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63780d25-7f1187713f288a0c158508ea;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 22:54:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: PkFAourr7ixQ5NYcdMugerMxFTdCLgIAaBz6erANuppgzE2Tm4yVpA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 3236f234d59c0fda99b416088c283260.cloudfront.net (CloudFront), 1.1 google
date: Sun, 20 Nov 2022 22:34:27 GMT
age: 71686
etag: "2dcc6187d7173ce741975ad4ec24435c9dcb0880"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff64f225f-d92d-42e1-a0cd-0b9c89e36291.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff64f225f-d92d-42e1-a0cd-0b9c89e36291.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4a8070a1aa0d48b75c639fa24eec3d96
14a81b4e2bdcdcdd951aa6660dc640c0292a2109
70b29ce3872a0c46d8d0e61f2801df1a98c8ea6e516adb1c2fe1bdad35f654f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff64f225f-d92d-42e1-a0cd-0b9c89e36291.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9042
x-amzn-requestid: 02203d7e-e15a-40d8-a09e-c40299c6f332
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bu2bSH6xoAMF1FA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375d114-79f15fbc1c64941e54c6d5e3;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 06:13:40 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YHoIX9fgjqNaOq_84IdURDMNigg62C8616_qky56Xx7ok4LJvvqEfw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 12:54:30 GMT
age: 20083
etag: "14a81b4e2bdcdcdd951aa6660dc640c0292a2109"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 481c033b9ffd030ff0de6e35cf788b47
85d3baad9217af2b5d75c019d2ef95dbb919a788
02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bubSsHbZoAMFZNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: s1153EpshSWYGLcN7Zzzs4PgXl9cddZ20gTwh5bK2HOBu4e_PSNCpQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 05:19:29 GMT
age: 47384
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F645dc32f-cd66-4021-92e9-77c4eff2fa1f.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F645dc32f-cd66-4021-92e9-77c4eff2fa1f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 96135f96986369533c0362367c1e6fd8
bc8b0612b79cb30817880fac9728318f837854b4
f4eab133baf21daae8b809966e8ffbe64a2414fd334538a226a2a39ab39c3d46
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F645dc32f-cd66-4021-92e9-77c4eff2fa1f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5045
x-amzn-requestid: 93295168-385b-4b26-92e0-65858db59541
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0PgfGfVoAMFjWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377f936-7d3d9e44191051f454bd53ca;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:29:26 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: hYkfj6mcRyzHioX7RAjvhpITDBX_CXLhum92tHz6ilGAY2C0fNi48g==
via: 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 a9e73292d0b92053c3e38dcec15fd0e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 08:37:09 GMT
age: 35524
etag: "bc8b0612b79cb30817880fac9728318f837854b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
madeirasemsaopaulo.com.br/vweb3/index_files/2012_eCommerce.css
200 OK 8.8 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/2012_eCommerce.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with CRLF line terminators
Hash e4ef87194ee66854f178f4bcbcffe0ca
788dfc449fe13f25df78f6bf00e7f9cc12219170
3b08f199e5f03a27d4e4ef06b21180c30d303faa6c8e87035b89b130b85278ed
GET /vweb3/index_files/2012_eCommerce.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/css
Content-Length: 8798
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:13 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/css
200 OK 24 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/css
IP
ASN #53057 RedeHost Internet Ltda.
Hash 71ab2d5dc2029112dffc9834eafcc599
5d3dc067095459a2ace31b10cc6cb343aca44577
7742176d36a9ea889f4db0a843e62f522ba690a8d514e91dd5aa09eccf7340ce
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Length: 24218
Connection: keep-alive
Vary: X-Proxy-Provider,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 21 Dec 2022 18:29:13 GMT
X-UA-Compatible: IE=Edge,chrome=1
madeirasemsaopaulo.com.br/vweb3/index_files/modernizr.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/modernizr.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/modernizr.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/jquery.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/jquery.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/jquery.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/cwc.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/cwc.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/cwc.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/jquery-ui.min.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/jquery-ui.min.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/jquery-ui.min.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/selector.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/selector.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/selector.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/jquery-cookie.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/jquery-cookie.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/jquery-cookie.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/function.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/function.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/function.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/search_autocomplete.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/search_autocomplete.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/search_autocomplete.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/f(1).txt
200 OK 1.1 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/f(1).txt
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (2584), with no line terminators
Hash cad6eff00d044ddb82b45b3526f3c068
1fcd168ee26831459ede26df22ce4ccf804f02de
44e641442e5bb70cdb8b2e6d245c7af8ce942e4e92a5790020c0d36fa3d86ffc
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/f(1).txt HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/plain
Content-Length: 1101
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:12 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=172800, must-revalidate
Expires: Mon, 21 Nov 2022 19:29:13 GMT
X-UA-Compatible: IE=Edge,chrome=1
madeirasemsaopaulo.com.br/vweb3/index_files/f(2).txt
200 OK 1.2 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/f(2).txt
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (2858), with no line terminators
Hash 99ebd46f8aa935b50e7dc76a7abaa186
23085b76709963128c9b639d5fbba391c25535b6
ed4b4bc7ea8892971451c45e42be3978369b5ace11fd7d8ab594dc3dd42f2ad4
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/f(2).txt HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/plain
Content-Length: 1161
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:12 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=172800, must-revalidate
Expires: Mon, 21 Nov 2022 19:29:13 GMT
X-UA-Compatible: IE=Edge,chrome=1
madeirasemsaopaulo.com.br/vweb3/index_files/gpt.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/gpt.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/gpt.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/f.txt
200 OK 14 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/f.txt
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (2427)
Hash e1b177bf01212b30caafbe726b329356
aaff049ad24ff3429516db06d791fc67ef902240
c4840646ec064ab3187e452ec4948b8f245654951741a69dd438c1b87bee2593
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/f.txt HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/plain
Content-Length: 13796
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:06 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=172800, must-revalidate
Expires: Mon, 21 Nov 2022 19:29:13 GMT
X-UA-Compatible: IE=Edge,chrome=1
madeirasemsaopaulo.com.br/vweb3/index_files/google-dfp.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/google-dfp.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/google-dfp.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/app.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/app.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/app.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/cpo.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/cpo.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/cpo.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/jquery.smartbanner.css
200 OK 1.5 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/jquery.smartbanner.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (496)
Hash 62354d979520163baca0b7041d9e6916
d8e308cac04c2c275fedb259cfe6267ea79a3a50
76e16caf378c64c031471616c00a2f83635a77677b2e34d0f2c097d5e75f2694
GET /vweb3/index_files/jquery.smartbanner.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/css
Content-Length: 1489
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:12 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:13 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/chat-common.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/chat-common.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/chat-common.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/jquery.smartbanner.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/jquery.smartbanner.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/jquery.smartbanner.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/pubads_impl_2021040101.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/pubads_impl_2021040101.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/pubads_impl_2021040101.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/RCf1b64ddc47d04c2ba552708d0de25b3b-source.min.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/RCf1b64ddc47d04c2ba552708d0de25b3b-source.min.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/RCf1b64ddc47d04c2ba552708d0de25b3b-source.min.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/14.8f875927fce05bedfe11.chunk.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/14.8f875927fce05bedfe11.chunk.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/14.8f875927fce05bedfe11.chunk.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/1.5159a7a0ba1fcaed8917.chunk.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/1.5159a7a0ba1fcaed8917.chunk.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/1.5159a7a0ba1fcaed8917.chunk.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/jsf.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/jsf.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/jsf.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:53 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/foundation.min.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/foundation.min.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/foundation.min.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/foundation.equalizer.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/foundation.equalizer.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/foundation.equalizer.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/RightNow.Client.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/RightNow.Client.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/RightNow.Client.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/CoreModule.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/CoreModule.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/CoreModule.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/UserDefinedHTMLModule.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/UserDefinedHTMLModule.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/UserDefinedHTMLModule.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/ScreenCaptureModule.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/ScreenCaptureModule.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/ScreenCaptureModule.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/lib/js/zip.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/lib/js/zip.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/lib/js/zip.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/saved_resource
200 OK 62 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/saved_resource
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with very long lines (61038)
Hash c113dd0d5e80ed67d5a62a54b7cf86dd
064306dcf59a114df2265e2caf298a113ffc86db
03fc69968cf2c297f3006f23bd13c7c3344af5a73a64ea16b37a21512b962a6b
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/saved_resource HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Length: 61477
Connection: keep-alive
Vary: X-Proxy-Provider,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:14 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 21 Dec 2022 18:29:14 GMT
X-UA-Compatible: IE=Edge,chrome=1
madeirasemsaopaulo.com.br/vweb3/index_files/cpc-main-logo.svg
200 OK 4.0 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/cpc-main-logo.svg
IP
ASN #53057 RedeHost Internet Ltda.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (730)
Hash 4e57927b9ea079ca0655f943283ae96a
c2e4a00eef3f41b64c16a76cfee53e2ab369dbc7
35a4fd9077c966e7b8fd89c8e69c08fb5ebf3c825c903ca23707cdd212a53b0b
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/cpc-main-logo.svg HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: image/svg+xml
Content-Length: 3959
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:14 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Wed, 21 Dec 2022 18:29:14 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/cpc-logo.svg
200 OK 598 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/cpc-logo.svg
IP
ASN #53057 RedeHost Internet Ltda.
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 57b16e2e1cac8e487cb924f2f61d4b7b
08c3547f5480c8e0e8c0f3492184d258f7ba7fd3
c43b1b2baa163df01dbabaabedc843a7fde676b1f74eedacb10caa30053b1e19
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/cpc-logo.svg HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: image/svg+xml
Content-Length: 598
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:14 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Wed, 21 Dec 2022 18:29:14 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/search.svg
200 OK 218 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/search.svg
IP
ASN #53057 RedeHost Internet Ltda.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (320), with no line terminators
Hash fb6dd2c30b85c7fc024bee4011a1eb5a
1bab1d1ccbaa99a29a105a4f6c182e73f88822b6
9529f8d89767d01d28a89249859cfa96063ec2048a2410a64009379a7dbee4ce
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/search.svg HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: image/svg+xml
Content-Length: 218
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:14 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Wed, 21 Dec 2022 18:29:14 GMT
madeirasemsaopaulo.com.br/vweb3/img/VISA.png
200 OK 2.6 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/img/VISA.png
IP
ASN #53057 RedeHost Internet Ltda.
File type PNG image data, 76 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 77132e2d2a017253481d08e742d3e19e
de31c8ab705fbcb0306322533bc2ca191da7ddda
c2ebc65be4adcd67c6f765dd6fdf467f2356a699af223d040c3a9240172f5572
GET /vweb3/img/VISA.png HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: image/png
Content-Length: 2623
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Sat, 10 Apr 2021 07:41:34 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Wed, 21 Dec 2022 18:29:14 GMT
madeirasemsaopaulo.com.br/vweb3/lib/js/txt-crypt.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/lib/js/txt-crypt.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/lib/js/txt-crypt.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/img/MasterCard.png
200 OK 2.1 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/img/MasterCard.png
IP
ASN #53057 RedeHost Internet Ltda.
File type PNG image data, 76 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash a91da822709b252138e4c440ad79d04e
4c26ba2830ea7c31121418794b1f044091e64688
fcac3c84e6a635d426b7458228688e7c9796647b8c13d7a6dc64b799a5071d71
GET /vweb3/img/MasterCard.png HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: image/png
Content-Length: 2100
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Sat, 10 Apr 2021 07:41:40 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Wed, 21 Dec 2022 18:29:14 GMT
madeirasemsaopaulo.com.br/vweb3/img/AmEx.png
200 OK 1.3 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/img/AmEx.png
IP
ASN #53057 RedeHost Internet Ltda.
File type PNG image data, 76 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 611194ba684143ee1aa4978c4b71ca3d
a5533aa1f1e8b891fb879faaddc31391c724f5ce
d970137818dfec3f1cb20f9f1b5a198fbbfea0f93837ced52b05ef0b7d1b6bcf
GET /vweb3/img/AmEx.png HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: image/png
Content-Length: 1284
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Sat, 10 Apr 2021 07:41:46 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Wed, 21 Dec 2022 18:29:14 GMT
madeirasemsaopaulo.com.br/vweb3/img/CVV_icon.png
200 OK 4.7 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/img/CVV_icon.png
IP
ASN #53057 RedeHost Internet Ltda.
File type PNG image data, 125 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash 382cf7ce4752383e7ecf8fe4f6c6875e
f9e22bbeaefdbe2fcb71f7995b9cf14e2f54ad00
a3a4e4a3cf784617d6c04252987795d9dc14fd3a2aa54e696fee4036918a969c
GET /vweb3/img/CVV_icon.png HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: image/png
Content-Length: 4660
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Sat, 10 Apr 2021 07:49:54 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Wed, 21 Dec 2022 18:29:14 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/gov-canada-logo.svg
200 OK 5.4 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/gov-canada-logo.svg
IP
ASN #53057 RedeHost Internet Ltda.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2441)
Hash 3dc50e600516d9f81a18fb0864ee3382
938591eb1dfa94c146cef690ee5b5c921fabb62e
ee791798259ca09740b184c303bbd8c43591de82ff4632d1b0cc5af0f863937f
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/gov-canada-logo.svg HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: image/svg+xml
Content-Length: 5387
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:14 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Wed, 21 Dec 2022 18:29:14 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/remove_screen_capture.png
200 OK 880 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/remove_screen_capture.png
IP
ASN #53057 RedeHost Internet Ltda.
File type PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced\012- data
Hash 762fb400849eceef946b5997b2d17be3
6615cde5af2eea6a13fd03e9ade605530e4e0098
2039218b7e21dff0f95daf1c016425120562817a46f42d345b12df22b36f4344
GET /vweb3/index_files/remove_screen_capture.png HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: image/png
Content-Length: 880
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:16 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Wed, 21 Dec 2022 18:29:14 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/building_preview.gif
200 OK 10 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/building_preview.gif
IP
ASN #53057 RedeHost Internet Ltda.
File type GIF image data, version 89a, 113 x 108\012- data
Hash 2a8b25e519017431c99e8684ac5ac1af
fc85e4ed90d26898a29b2b5de074feed4cbbc69c
1fcb0bcd750e33efb1097d91bd1eb04d8be178c4f0fd4c4a3f2a5ebce5b76fc6
GET /vweb3/index_files/building_preview.gif HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: image/gif
Content-Length: 10086
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:16 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Wed, 21 Dec 2022 18:29:14 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/modernizr.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/modernizr.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/modernizr.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/cp_print.css
200 OK 1.2 kB URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/cp_print.css
IP
ASN #53057 RedeHost Internet Ltda.
File type ASCII text, with CRLF line terminators
Hash a2f7c4cc5666721ac4c7f37e0635e6f8
39798930cc3b92baeaaa46d71e56e07c5b633069
17a5a0c21384c870ddebc7cc1ae34c7577cd5e9c20fb04f7b20bbe259fae53b2
GET /vweb3/index_files/cp_print.css HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Type: text/css
Content-Length: 1234
Connection: keep-alive
Vary: X-Proxy-Provider,Accept-Encoding,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:10 GMT
Accept-Ranges: none
Content-Encoding: gzip
Cache-Control: max-age=604800, must-revalidate
Expires: Tue, 21 Nov 2023 18:29:15 GMT
madeirasemsaopaulo.com.br/vweb3/index_files/jquery.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/jquery.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/jquery.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:55 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/cwc.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/cwc.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/cwc.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:55 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/jquery-ui.min.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/jquery-ui.min.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/jquery-ui.min.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:55 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/selector.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/selector.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/selector.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:55 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/jquery-cookie.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/jquery-cookie.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/jquery-cookie.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:55 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/function.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/function.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/function.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:56 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/search_autocomplete.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/search_autocomplete.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/search_autocomplete.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:56 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/jCarousel.min.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/jCarousel.min.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/jCarousel.min.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:56 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/google-dfp.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/google-dfp.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/google-dfp.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:56 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/app.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/app.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/app.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:57 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/cpo.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/cpo.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/cpo.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:57 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/cpo.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/cpo.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/cpo.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:57 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/chat-common.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/chat-common.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/chat-common.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:57 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/jquery.smartbanner.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/jquery.smartbanner.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/jquery.smartbanner.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:58 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/pubads_impl_2021040101.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/pubads_impl_2021040101.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/pubads_impl_2021040101.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:58 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/saved_resource(1)
200 OK 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/saved_resource(1)
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/saved_resource(1) HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 18:13:54 GMT
Content-Length: 61477
Connection: keep-alive
Vary: X-Proxy-Provider,User-Agent
Last-Modified: Thu, 08 Apr 2021 07:06:14 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Wed, 21 Dec 2022 18:29:14 GMT
X-UA-Compatible: IE=Edge,chrome=1
madeirasemsaopaulo.com.br/vweb3/index_files/14.8f875927fce05bedfe11.chunk.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/14.8f875927fce05bedfe11.chunk.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/14.8f875927fce05bedfe11.chunk.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:58 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/1.5159a7a0ba1fcaed8917.chunk.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/1.5159a7a0ba1fcaed8917.chunk.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/1.5159a7a0ba1fcaed8917.chunk.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:58 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/14.8f875927fce05bedfe11.chunk.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/14.8f875927fce05bedfe11.chunk.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/14.8f875927fce05bedfe11.chunk.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:58 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/1.5159a7a0ba1fcaed8917.chunk.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/1.5159a7a0ba1fcaed8917.chunk.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/1.5159a7a0ba1fcaed8917.chunk.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:58 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9afe0ae0199aff69fefbe5a55490d31
126f648ad266469bf531b5c08f7f71a973d0eeb0
105d272d89fa39de018c77cb85f97c12af739243c6bf8172e2914217bd2efec5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 18:29:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.canadapost.ca/cpc/assets/cpc/img/icons/search.svg
301 Moved Permanently 0 B URL HTTP/1.1 www.canadapost.ca/cpc/assets/cpc/img/icons/search.svg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cpc/assets/cpc/img/icons/search.svg HTTP/1.1
Host: www.canadapost.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/search.svg
Date: Mon, 21 Nov 2022 18:29:19 GMT
Connection: keep-alive
strict-transport-security: max-age=31536000; includeSubdomains; preload
www.canadapost.ca/cpc/assets/cpc/img/icons/global-alert/alert.svg
301 Moved Permanently 0 B URL HTTP/1.1 www.canadapost.ca/cpc/assets/cpc/img/icons/global-alert/alert.svg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cpc/assets/cpc/img/icons/global-alert/alert.svg HTTP/1.1
Host: www.canadapost.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/global-alert/alert.svg
Date: Mon, 21 Nov 2022 18:29:19 GMT
Connection: keep-alive
strict-transport-security: max-age=31536000; includeSubdomains; preload
www.canadapost.ca/cpc/assets/cpc/img/icons/arrow-down.svg
301 Moved Permanently 0 B URL HTTP/1.1 www.canadapost.ca/cpc/assets/cpc/img/icons/arrow-down.svg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cpc/assets/cpc/img/icons/arrow-down.svg HTTP/1.1
Host: www.canadapost.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/arrow-down.svg
Date: Mon, 21 Nov 2022 18:29:19 GMT
Connection: keep-alive
strict-transport-security: max-age=31536000; includeSubdomains; preload
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9afe0ae0199aff69fefbe5a55490d31
126f648ad266469bf531b5c08f7f71a973d0eeb0
105d272d89fa39de018c77cb85f97c12af739243c6bf8172e2914217bd2efec5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 18:29:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.canadapost.ca/cpc/assets/cpc/img/icons/icon-lock.svg
301 Moved Permanently 0 B URL HTTP/1.1 www.canadapost.ca/cpc/assets/cpc/img/icons/icon-lock.svg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cpc/assets/cpc/img/icons/icon-lock.svg HTTP/1.1
Host: www.canadapost.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/icon-lock.svg
Date: Mon, 21 Nov 2022 18:29:19 GMT
Connection: keep-alive
strict-transport-security: max-age=31536000; includeSubdomains; preload
www.canadapost.ca/cpc/assets/cpc/img/icons/global-alert/cancel.svg
301 Moved Permanently 0 B URL HTTP/1.1 www.canadapost.ca/cpc/assets/cpc/img/icons/global-alert/cancel.svg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cpc/assets/cpc/img/icons/global-alert/cancel.svg HTTP/1.1
Host: www.canadapost.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/global-alert/cancel.svg
Date: Mon, 21 Nov 2022 18:29:19 GMT
Connection: keep-alive
strict-transport-security: max-age=31536000; includeSubdomains; preload
fonts.gstatic.com/s/roboto/v27/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 57 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v27/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 57116, version 1.0\012- data
Hash 0df839703cae7648ea76e7525842ec83
1220ca1a9f7fb2f27f0249fdcc31e29636e48e9b
1287b4c6427119cabf899a5ea898f81e831a2742614813a3302f671690b399c2
GET /s/roboto/v27/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://madeirasemsaopaulo.com.br
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 57116
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 15 Nov 2022 17:49:56 GMT
expires: Wed, 15 Nov 2023 17:49:56 GMT
cache-control: public, max-age=31536000
age: 520763
last-modified: Tue, 21 Sep 2021 23:13:54 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15732, version 1.0\012- data
Hash 80fe119e5efa3911b9d61b265f723b3d
34f751a1b1a0c1c0b5264b99f490e689db939657
33530b007071281a97e79baab13ddf7cc4b9de942ebd3e212224857335f7cb97
GET /s/roboto/v27/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://madeirasemsaopaulo.com.br
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15732
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 02:03:28 GMT
expires: Tue, 21 Nov 2023 02:03:28 GMT
cache-control: public, max-age=31536000
age: 59151
last-modified: Mon, 05 Apr 2021 21:10:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9afe0ae0199aff69fefbe5a55490d31
126f648ad266469bf531b5c08f7f71a973d0eeb0
105d272d89fa39de018c77cb85f97c12af739243c6bf8172e2914217bd2efec5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 18:29:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
madeirasemsaopaulo.com.br/vweb3/index_files/jsf.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/jsf.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/jsf.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:59 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/cpotools/mc/assets/images/structure/blue_question_icon.gif
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/cpotools/mc/assets/images/structure/blue_question_icon.gif
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /cpotools/mc/assets/images/structure/blue_question_icon.gif HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/index_files/extendstyles.css
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:59 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/search.svg
200 OK 218 B URL HTTP/1.1 www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/search.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (320), with no line terminators
Hash d3a621feba2c9afadc8e74c4f71021e1
5364a043f80e5dcbc81b81e86d406eedfc1b69a4
9616a4bbe31bf59f3ec6fd4a9f237bfb89d3424a45238b625b7f1620377d5401
GET /cpc/assets/cpc/img/icons/search.svg HTTP/1.1
Host: www.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://madeirasemsaopaulo.com.br/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/svg+xml
ETag: "5a78a621-140"
Last-Modified: Mon, 05 Feb 2018 18:44:49 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
content-security-policy-report-only: object-src 'none'; connect-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.cpggpc.ca https://www.google-analytics.com https://siteintercept.qualtrics.com https://www.facebook.com https://sslstats.canadapost.ca https://*.wistia.com https://dpm.demdex.net https://csi.gstatic.com https://adservice.google.com https://*.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://vmss.boldchat.com https://www.linkedin.com https://canadapost.tt.omtrdc.net https://services.postcodeanywhere.co.uk https://embedwistia-a.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com; font-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://fonts.gstatic.com https://*.arcgis.com; form-action 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca https://*.epost.ca https://www.facebook.com https://google.com; frame-ancestors 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.cpggpc.ca https://www.adobetag.com https://assets.adobedtm.com https://siteintercept.qualtrics.com https://zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https://connect.facebook.net https://snap.licdn.com https://z.moatads.com https://static.ads-twitter.com https://www.googletagmanager.com https://www.google.com https://www.googletagservices.com https://*.google-analytics.com https://*.googleadservices.com https://www.gstatic.com https://*.googlesyndication.com https://adservice.google.com https://adservice.google.ca https://maps.googleapis.com https://cdn.ampproject.org https://*.doubleclick.net https://*.twitter.com https://cdn.syndication.twimg.com https://dpm.demdex.net https://*.wistia.com https://*.frontlinesvc.com https://*.arcgis.com https://www.linkedin.com https://vmss.boldchat.com https://sb.scorecardresearch.com https://www.rnengage.com https://sjs.bizographics.com https://www.instagram.com https://secure.adnxs.com https://app.five9.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https://*.frontlinesvc.com https://fonts.googleapis.com https://translate.googleapis.com https://*.twitter.com https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.arcgis.com https://*.arcgisonline.com https://app.five9.com; report-uri https://www.canadapost-postescanada.ca/cwc/components/rs/csp-reports;
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
Cache-Control: max-age=86400, private
Expires: Thu, 15 Sep 2022 16:23:11 GMT
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
Content-Security-Policy: frame-ancestors 'self'
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubdomains; preload
Content-Encoding: gzip
Content-Length: 218
Date: Mon, 21 Nov 2022 18:29:19 GMT
Connection: keep-alive
Vary: Accept-Encoding
www.canadapost.ca/cpc/assets/cpc/img/icons/toolbar-cg/feedback.svg
301 Moved Permanently 0 B URL HTTP/1.1 www.canadapost.ca/cpc/assets/cpc/img/icons/toolbar-cg/feedback.svg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cpc/assets/cpc/img/icons/toolbar-cg/feedback.svg HTTP/1.1
Host: www.canadapost.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/toolbar-cg/feedback.svg
Date: Mon, 21 Nov 2022 18:29:19 GMT
Connection: keep-alive
strict-transport-security: max-age=31536000; includeSubdomains; preload
madeirasemsaopaulo.com.br/shop/mc/assets/images/app/ecomm/structure/chevron-right.svg
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/shop/mc/assets/images/app/ecomm/structure/chevron-right.svg
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /shop/mc/assets/images/app/ecomm/structure/chevron-right.svg HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/index_files/2012_eCommerce.css
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:59 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15828, version 1.0\012- data
Hash bf28241e67511184c14dbd0ef7d39f91
c706e0a4122ab727645b744c21667390e8898a4d
0eaeadb58e6995ba85eccb6198aaef77eeb1d4b66699e4e1f3fc10eb6adfcdb9
GET /s/roboto/v27/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://madeirasemsaopaulo.com.br
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15828
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 01:52:54 GMT
expires: Sun, 19 Nov 2023 01:52:54 GMT
cache-control: public, max-age=31536000
age: 232585
last-modified: Mon, 05 Apr 2021 21:10:46 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/toolbar-cg/feedback.svg
200 OK 382 B URL HTTP/1.1 www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/toolbar-cg/feedback.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (724), with no line terminators
Hash b86b3f712d7d1224f22ce80ab788d8bc
1015427d965943c5acfda2a2b96174c96a30e715
827930f77d0aee840f92563e8da302b30e9f0b196f923edd0f6305faf4ae7df0
GET /cpc/assets/cpc/img/icons/toolbar-cg/feedback.svg HTTP/1.1
Host: www.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://madeirasemsaopaulo.com.br/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/svg+xml
ETag: "5a78a638-2d4"
Last-Modified: Mon, 05 Feb 2018 18:45:12 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
content-security-policy-report-only: object-src 'none'; connect-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.cpggpc.ca https://www.google-analytics.com https://siteintercept.qualtrics.com https://www.facebook.com https://sslstats.canadapost.ca https://*.wistia.com https://dpm.demdex.net https://csi.gstatic.com https://adservice.google.com https://*.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://vmss.boldchat.com https://www.linkedin.com https://canadapost.tt.omtrdc.net https://services.postcodeanywhere.co.uk https://embedwistia-a.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com; font-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://fonts.gstatic.com https://*.arcgis.com; form-action 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca https://*.epost.ca https://www.facebook.com https://google.com; frame-ancestors 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.cpggpc.ca https://www.adobetag.com https://assets.adobedtm.com https://siteintercept.qualtrics.com https://zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https://connect.facebook.net https://snap.licdn.com https://z.moatads.com https://static.ads-twitter.com https://www.googletagmanager.com https://www.google.com https://www.googletagservices.com https://*.google-analytics.com https://*.googleadservices.com https://www.gstatic.com https://*.googlesyndication.com https://adservice.google.com https://adservice.google.ca https://maps.googleapis.com https://cdn.ampproject.org https://*.doubleclick.net https://*.twitter.com https://cdn.syndication.twimg.com https://dpm.demdex.net https://*.wistia.com https://*.frontlinesvc.com https://*.arcgis.com https://www.linkedin.com https://vmss.boldchat.com https://sb.scorecardresearch.com https://www.rnengage.com https://sjs.bizographics.com https://www.instagram.com https://secure.adnxs.com https://app.five9.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https://*.frontlinesvc.com https://fonts.googleapis.com https://translate.googleapis.com https://*.twitter.com https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.arcgis.com https://*.arcgisonline.com https://app.five9.com; report-uri https://www.canadapost-postescanada.ca/cwc/components/rs/csp-reports;
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
Cache-Control: max-age=86400, private
Expires: Mon, 03 Oct 2022 07:02:38 GMT
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
Content-Security-Policy: frame-ancestors 'self'
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubdomains; preload
Content-Encoding: gzip
Content-Length: 382
Date: Mon, 21 Nov 2022 18:29:19 GMT
Connection: keep-alive
Vary: Accept-Encoding
www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/global-alert/alert.svg
200 OK 455 B URL HTTP/1.1 www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/global-alert/alert.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text
Hash ff8ab0bd64b81f01e5245fdcc5f86256
cb16cfd030e7f5758ff0320d3c467cc53b858d50
f36fd8c683ecf6ae26d06c171f584b955e5603ac12435b1fe0560a6e0a90d6dd
GET /cpc/assets/cpc/img/icons/global-alert/alert.svg HTTP/1.1
Host: www.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://madeirasemsaopaulo.com.br/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/svg+xml
ETag: "5a6b5666-3ef"
Last-Modified: Fri, 26 Jan 2018 16:25:10 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
content-security-policy-report-only: object-src 'none'; connect-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.cpggpc.ca https://www.google-analytics.com https://siteintercept.qualtrics.com https://www.facebook.com https://sslstats.canadapost.ca https://*.wistia.com https://dpm.demdex.net https://csi.gstatic.com https://adservice.google.com https://*.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://vmss.boldchat.com https://www.linkedin.com https://canadapost.tt.omtrdc.net https://services.postcodeanywhere.co.uk https://embedwistia-a.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com; font-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://fonts.gstatic.com https://*.arcgis.com; form-action 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca https://*.epost.ca https://www.facebook.com https://google.com; frame-ancestors 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.cpggpc.ca https://www.adobetag.com https://assets.adobedtm.com https://siteintercept.qualtrics.com https://zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https://connect.facebook.net https://snap.licdn.com https://z.moatads.com https://static.ads-twitter.com https://www.googletagmanager.com https://www.google.com https://www.googletagservices.com https://*.google-analytics.com https://*.googleadservices.com https://www.gstatic.com https://*.googlesyndication.com https://adservice.google.com https://adservice.google.ca https://maps.googleapis.com https://cdn.ampproject.org https://*.doubleclick.net https://*.twitter.com https://cdn.syndication.twimg.com https://dpm.demdex.net https://*.wistia.com https://*.frontlinesvc.com https://*.arcgis.com https://www.linkedin.com https://vmss.boldchat.com https://sb.scorecardresearch.com https://www.rnengage.com https://sjs.bizographics.com https://www.instagram.com https://secure.adnxs.com https://app.five9.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https://*.frontlinesvc.com https://fonts.googleapis.com https://translate.googleapis.com https://*.twitter.com https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.arcgis.com https://*.arcgisonline.com https://app.five9.com; report-uri https://www.canadapost-postescanada.ca/cwc/components/rs/csp-reports;
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
Cache-Control: max-age=86400, private
Expires: Sun, 14 Aug 2022 17:54:20 GMT
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
Content-Security-Policy: frame-ancestors 'self'
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubdomains; preload
Content-Encoding: gzip
Content-Length: 455
Date: Mon, 21 Nov 2022 18:29:19 GMT
Connection: keep-alive
Vary: Accept-Encoding
www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/global-alert/cancel.svg
200 OK 377 B URL HTTP/1.1 www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/global-alert/cancel.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text
Hash 3e69d3df64d1d2900137d925afc81ef4
27113030bc0a70e40c1ec28523c53118feb97454
2aaceded66a94f94d5bb275b056d4310327b9eb50004d6e985417cf7d792d251
GET /cpc/assets/cpc/img/icons/global-alert/cancel.svg HTTP/1.1
Host: www.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://madeirasemsaopaulo.com.br/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/svg+xml
ETag: "5a6b5666-331"
Last-Modified: Fri, 26 Jan 2018 16:25:10 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
content-security-policy-report-only: object-src 'none'; connect-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.cpggpc.ca https://www.google-analytics.com https://siteintercept.qualtrics.com https://www.facebook.com https://sslstats.canadapost.ca https://*.wistia.com https://dpm.demdex.net https://csi.gstatic.com https://adservice.google.com https://*.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://vmss.boldchat.com https://www.linkedin.com https://canadapost.tt.omtrdc.net https://services.postcodeanywhere.co.uk https://embedwistia-a.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com; font-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://fonts.gstatic.com https://*.arcgis.com; form-action 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca https://*.epost.ca https://www.facebook.com https://google.com; frame-ancestors 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.cpggpc.ca https://www.adobetag.com https://assets.adobedtm.com https://siteintercept.qualtrics.com https://zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https://connect.facebook.net https://snap.licdn.com https://z.moatads.com https://static.ads-twitter.com https://www.googletagmanager.com https://www.google.com https://www.googletagservices.com https://*.google-analytics.com https://*.googleadservices.com https://www.gstatic.com https://*.googlesyndication.com https://adservice.google.com https://adservice.google.ca https://maps.googleapis.com https://cdn.ampproject.org https://*.doubleclick.net https://*.twitter.com https://cdn.syndication.twimg.com https://dpm.demdex.net https://*.wistia.com https://*.frontlinesvc.com https://*.arcgis.com https://www.linkedin.com https://vmss.boldchat.com https://sb.scorecardresearch.com https://www.rnengage.com https://sjs.bizographics.com https://www.instagram.com https://secure.adnxs.com https://app.five9.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https://*.frontlinesvc.com https://fonts.googleapis.com https://translate.googleapis.com https://*.twitter.com https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.arcgis.com https://*.arcgisonline.com https://app.five9.com; report-uri https://www.canadapost-postescanada.ca/cwc/components/rs/csp-reports;
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
Cache-Control: max-age=86400, private
Expires: Mon, 25 Jul 2022 13:51:51 GMT
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
Content-Security-Policy: frame-ancestors 'self'
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubdomains; preload
Content-Encoding: gzip
Content-Length: 377
Date: Mon, 21 Nov 2022 18:29:19 GMT
Connection: keep-alive
Vary: Accept-Encoding
madeirasemsaopaulo.com.br/vweb3/index_files/foundation.min.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/foundation.min.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/foundation.min.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:59 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/arrow-down.svg
200 OK 167 B URL HTTP/1.1 www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/arrow-down.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 4ed5c36b7d9f92ed672bb1d5114b1b72
82b2a08c925663c452eb17d71d1c81dced90d334
2f598f2c792e57f0ad56a71362d58aef0b155d8eeaa139d3fd3e7c6cfdfb845e
GET /cpc/assets/cpc/img/icons/arrow-down.svg HTTP/1.1
Host: www.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://madeirasemsaopaulo.com.br/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/svg+xml
ETag: "5a78a622-b9"
Last-Modified: Mon, 05 Feb 2018 18:44:50 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
content-security-policy-report-only: object-src 'none'; connect-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.cpggpc.ca https://www.google-analytics.com https://siteintercept.qualtrics.com https://www.facebook.com https://sslstats.canadapost.ca https://*.wistia.com https://dpm.demdex.net https://csi.gstatic.com https://adservice.google.com https://*.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://vmss.boldchat.com https://www.linkedin.com https://canadapost.tt.omtrdc.net https://services.postcodeanywhere.co.uk https://embedwistia-a.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com; font-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://fonts.gstatic.com https://*.arcgis.com; form-action 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca https://*.epost.ca https://www.facebook.com https://google.com; frame-ancestors 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.cpggpc.ca https://www.adobetag.com https://assets.adobedtm.com https://siteintercept.qualtrics.com https://zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https://connect.facebook.net https://snap.licdn.com https://z.moatads.com https://static.ads-twitter.com https://www.googletagmanager.com https://www.google.com https://www.googletagservices.com https://*.google-analytics.com https://*.googleadservices.com https://www.gstatic.com https://*.googlesyndication.com https://adservice.google.com https://adservice.google.ca https://maps.googleapis.com https://cdn.ampproject.org https://*.doubleclick.net https://*.twitter.com https://cdn.syndication.twimg.com https://dpm.demdex.net https://*.wistia.com https://*.frontlinesvc.com https://*.arcgis.com https://www.linkedin.com https://vmss.boldchat.com https://sb.scorecardresearch.com https://www.rnengage.com https://sjs.bizographics.com https://www.instagram.com https://secure.adnxs.com https://app.five9.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https://*.frontlinesvc.com https://fonts.googleapis.com https://translate.googleapis.com https://*.twitter.com https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.arcgis.com https://*.arcgisonline.com https://app.five9.com; report-uri https://www.canadapost-postescanada.ca/cwc/components/rs/csp-reports;
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
Cache-Control: max-age=86400, private
Expires: Mon, 25 Jul 2022 13:51:51 GMT
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
Content-Security-Policy: frame-ancestors 'self'
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubdomains; preload
Content-Encoding: gzip
Content-Length: 167
Date: Mon, 21 Nov 2022 18:29:19 GMT
Connection: keep-alive
Vary: Accept-Encoding
www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/icon-lock.svg
200 OK 432 B URL HTTP/1.1 www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/icon-lock.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (907), with no line terminators
Hash 2ad110b6a820845cf1b4b1d8e0585d48
6871d97125e77d9e676518742276710ec39279d9
e170143cc77d854d7bd7110f42251e13ae38c16b6f99a101b546c56d0b0ca23e
GET /cpc/assets/cpc/img/icons/icon-lock.svg HTTP/1.1
Host: www.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://madeirasemsaopaulo.com.br/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/svg+xml
ETag: "5a78a622-38b"
Last-Modified: Mon, 05 Feb 2018 18:44:50 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
content-security-policy-report-only: object-src 'none'; connect-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.cpggpc.ca https://www.google-analytics.com https://siteintercept.qualtrics.com https://www.facebook.com https://sslstats.canadapost.ca https://*.wistia.com https://dpm.demdex.net https://csi.gstatic.com https://adservice.google.com https://*.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://vmss.boldchat.com https://www.linkedin.com https://canadapost.tt.omtrdc.net https://services.postcodeanywhere.co.uk https://embedwistia-a.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com; font-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://fonts.gstatic.com https://*.arcgis.com; form-action 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca https://*.epost.ca https://www.facebook.com https://google.com; frame-ancestors 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.cpggpc.ca https://www.adobetag.com https://assets.adobedtm.com https://siteintercept.qualtrics.com https://zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https://connect.facebook.net https://snap.licdn.com https://z.moatads.com https://static.ads-twitter.com https://www.googletagmanager.com https://www.google.com https://www.googletagservices.com https://*.google-analytics.com https://*.googleadservices.com https://www.gstatic.com https://*.googlesyndication.com https://adservice.google.com https://adservice.google.ca https://maps.googleapis.com https://cdn.ampproject.org https://*.doubleclick.net https://*.twitter.com https://cdn.syndication.twimg.com https://dpm.demdex.net https://*.wistia.com https://*.frontlinesvc.com https://*.arcgis.com https://www.linkedin.com https://vmss.boldchat.com https://sb.scorecardresearch.com https://www.rnengage.com https://sjs.bizographics.com https://www.instagram.com https://secure.adnxs.com https://app.five9.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https://*.frontlinesvc.com https://fonts.googleapis.com https://translate.googleapis.com https://*.twitter.com https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.arcgis.com https://*.arcgisonline.com https://app.five9.com; report-uri https://www.canadapost-postescanada.ca/cwc/components/rs/csp-reports;
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
Cache-Control: max-age=86400, private
Expires: Tue, 27 Sep 2022 21:14:30 GMT
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
Content-Security-Policy: frame-ancestors 'self'
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubdomains; preload
Content-Encoding: gzip
Content-Length: 432
Date: Mon, 21 Nov 2022 18:29:19 GMT
Connection: keep-alive
Vary: Accept-Encoding
madeirasemsaopaulo.com.br/vweb3/index_files/foundation.equalizer.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/foundation.equalizer.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/foundation.equalizer.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:59 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
madeirasemsaopaulo.com.br/vweb3/index_files/RightNow.Client.js
404 Not Found 315 B URL HTTP/1.1 madeirasemsaopaulo.com.br/vweb3/index_files/RightNow.Client.js
IP
ASN #53057 RedeHost Internet Ltda.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Phishing
GET /vweb3/index_files/RightNow.Client.js HTTP/1.1
Host: madeirasemsaopaulo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/vweb3/
Cookie: _gcl_au=1.1.175050715.1669055353
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 18:13:59 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 315
Connection: keep-alive
fonts.googleapis.com/css?family=Roboto:300,400,500,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,500,700
IP
GET /css?family=Roboto:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://madeirasemsaopaulo.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 21 Nov 2022 18:29:13 GMT
date: Mon, 21 Nov 2022 18:29:13 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
177.55.111.8
142.250.74.35
93.184.220.29
23.61.214.200
23.36.77.32