kl.gruplast.com.br/kvk
78.128.112.208301 Moved Permanently 238 B IP 78.128.112.208:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1a50469352cb56235149aa874e454200
af9148012491780f9a658580b28509006b2fa6bb
8f4108759755b44851dad8709e59293249a1a2d13e0bbc8b5c3c4d63a2148c39
Analyzer Verdict Alert openphish Government Service
fortinet Phishing
GET /kvk HTTP/1.1
Host: kl.gruplast.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 13 Dec 2022 00:55:33 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 238
Connection: keep-alive
Keep-Alive: timeout=60
Location: http://kl.gruplast.com.br/kvk/
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3c0c53379f331e934f61070074d41035
420f6e542cbf741838566f22e475a80e2f600d21
4b7213ec107cdf1c2cd61a124453fb682ec291af0004d071105c87e2fe7528f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B7213EC107CDF1C2CD61A124453FB682EC291AF0004D071105C87E2FE7528F5"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4352
Expires: Tue, 13 Dec 2022 02:08:05 GMT
Date: Tue, 13 Dec 2022 00:55:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b642ec5702fb818c5d1c67168cc68fdb
015146489a8e7fcb4ba0ba74cfe757a072705f93
4846d047a23903856bd113d02639ce7e08a1e40030151d302295b2d12df98ffc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4846D047A23903856BD113D02639CE7E08A1E40030151D302295B2D12DF98FFC"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6501
Expires: Tue, 13 Dec 2022 02:43:54 GMT
Date: Tue, 13 Dec 2022 00:55:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d29881eeb0456eff8cf415ad2ce64ba0
e3cfdd5f56ff88066257ec8f4726f53e3a733bd3
2cd90072f113163f976ddb8bc7017884efd3f764e7e8961b04e3ba5ec0a17d85
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2CD90072F113163F976DDB8BC7017884EFD3F764E7E8961B04E3BA5EC0A17D85"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10082
Expires: Tue, 13 Dec 2022 03:43:35 GMT
Date: Tue, 13 Dec 2022 00:55:33 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 13 Dec 2022 00:08:39 GMT
content-type: application/json
age: 2814
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Paa63a3YnKOsR7Q9PkzPjh/1uGLtJYxT024J4gk4s4P8Jrus7yvM4ipUq8OeQuCQ1p6HinLAl6k=
x-amz-request-id: CMD9E62MC5J5NHD1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 13 Dec 2022 00:51:42 GMT
age: 232
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
kl.gruplast.com.br/kvk/
78.128.112.208200 OK 6.5 kB IP 78.128.112.208:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8877)
Hash 85076e05b39c1bfacf580cca4a4cca35
78b55af15618669e6f1be3837ab2529eab1b0193
21de2d7f5743a314631c204caa1cf97e2c3d4bebb2510349f91d540e9a941ff6
Analyzer Verdict Alert urlquery phishing Phishing - KVK
fortinet Phishing
GET /kvk/ HTTP/1.1
Host: kl.gruplast.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 00:55:33 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 6462
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: PHPSESSID=5ehuutsvmf4tirdj483214c012; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 00:55:34 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
kl.gruplast.com.br/kvk/KvK/tbPageWrapper.bundle.j.download
78.128.112.208404 Not Found 725 B URL HTTP/1.1 kl.gruplast.com.br/kvk/KvK/tbPageWrapper.bundle.j.download
IP 78.128.112.208:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5e0f2985d011796487ca80320abae04a
b0cde25df55debb2447f00925086876a77097178
006a5e0cea9df4ab1ea68968d48ad0838835d7133f5f105b8eaafbd2ed6f8ee7
Analyzer Verdict Alert fortinet Phishing
GET /kvk/KvK/tbPageWrapper.bundle.j.download HTTP/1.1
Host: kl.gruplast.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kl.gruplast.com.br/kvk/
Cookie: PHPSESSID=5ehuutsvmf4tirdj483214c012
HTTP/1.1 404 Not Found
Server: nginx
Date: Tue, 13 Dec 2022 00:55:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Wed, 30 Nov 2022 22:33:07 GMT
ETag: W/"595-5eeb7b04726be"
Content-Encoding: gzip
kl.gruplast.com.br/kvk/KvK/styles.min.css
78.128.112.208200 OK 12 kB URL HTTP/1.1 kl.gruplast.com.br/kvk/KvK/styles.min.css
IP 78.128.112.208:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2e88c73fa31bb46caa187876b232e1d0
f2b4d5496cd3a23ac7008910836ace039df51222
0be3f751c7452f020f7aa188dfeaacd7ab79086f0ea2bf0c8f776f58a515854a
GET /kvk/KvK/styles.min.css HTTP/1.1
Host: kl.gruplast.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kl.gruplast.com.br/kvk/
Cookie: PHPSESSID=5ehuutsvmf4tirdj483214c012
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 00:55:34 GMT
Content-Type: text/css
Last-Modified: Wed, 30 Nov 2022 22:51:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6387de7f-11a0d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
kl.gruplast.com.br/kvk/KvK/adrum.js.download
78.128.112.208200 OK 23 kB URL HTTP/1.1 kl.gruplast.com.br/kvk/KvK/adrum.js.download
IP 78.128.112.208:0
File type ASCII text, with very long lines (643)
Hash 736c7c01c3748a0c141189bf0fc35e2d
803ee4f7f5617708921dc01f15ed0e9f1505558d
c9c05849493f249c643aa65239e1d6572b27570aed628900b1a290cb962662e6
Analyzer Verdict Alert fortinet Phishing
GET /kvk/KvK/adrum.js.download HTTP/1.1
Host: kl.gruplast.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kl.gruplast.com.br/kvk/
Cookie: PHPSESSID=5ehuutsvmf4tirdj483214c012
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 00:55:34 GMT
Content-Type: application/javascript
Content-Length: 22811
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 30 Nov 2022 22:51:43 GMT
ETag: "124cd-5eeb7f2c55dc0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
kl.gruplast.com.br/kvk/KvK/styles-40.min.css
78.128.112.208200 OK 61 kB URL HTTP/1.1 kl.gruplast.com.br/kvk/KvK/styles-40.min.css
IP 78.128.112.208:0
File type ASCII text, with very long lines (40167)
Hash fe47f5048a09855fb522126bc4652218
0e79524e8bcaea08c5c4c0b73af851f452664144
f050dda34ca2d9aad3832713f38b4d70080358c5d1e144849b2959b7e0e5a18b
GET /kvk/KvK/styles-40.min.css HTTP/1.1
Host: kl.gruplast.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kl.gruplast.com.br/kvk/
Cookie: PHPSESSID=5ehuutsvmf4tirdj483214c012
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 00:55:34 GMT
Content-Type: text/css
Last-Modified: Wed, 30 Nov 2022 22:51:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6387de7f-92dff"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 13 Dec 2022 00:07:57 GMT
age: 2857
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
kl.gruplast.com.br/kvk/KvK/tbPageWrapper.bundle.j.download
78.128.112.208404 Not Found 725 B URL HTTP/1.1 kl.gruplast.com.br/kvk/KvK/tbPageWrapper.bundle.j.download
IP 78.128.112.208:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5e0f2985d011796487ca80320abae04a
b0cde25df55debb2447f00925086876a77097178
006a5e0cea9df4ab1ea68968d48ad0838835d7133f5f105b8eaafbd2ed6f8ee7
Analyzer Verdict Alert fortinet Phishing
GET /kvk/KvK/tbPageWrapper.bundle.j.download HTTP/1.1
Host: kl.gruplast.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kl.gruplast.com.br/kvk/
Cookie: PHPSESSID=5ehuutsvmf4tirdj483214c012
HTTP/1.1 404 Not Found
Server: nginx
Date: Tue, 13 Dec 2022 00:55:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Wed, 30 Nov 2022 22:33:07 GMT
ETag: W/"595-5eeb7b04726be"
Content-Encoding: gzip
kl.gruplast.com.br/kvk/KvK/roboto-v18-latin-300.woff2
78.128.112.208200 OK 15 kB URL HTTP/1.1 kl.gruplast.com.br/kvk/KvK/roboto-v18-latin-300.woff2
IP 78.128.112.208:0
File type Web Open Font Format (Version 2), TrueType, length 15440, version 1.0\012- data
Hash 55536c8e9e9a532651e3cf374f290ea3
ff3a9b8ae317896cbbcbadfbe615d671bd1d32a2
eca8ffa764a66cd084800e2e71c4176ef089ebd805515664a6cb8d4fb3b598bf
Analyzer Verdict Alert urlquery phishing Phishing - KVK
fortinet Phishing
GET /kvk/KvK/roboto-v18-latin-300.woff2 HTTP/1.1
Host: kl.gruplast.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://kl.gruplast.com.br/kvk/KvK/styles-40.min.css
Cookie: PHPSESSID=5ehuutsvmf4tirdj483214c012
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 00:55:34 GMT
Content-Length: 15440
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 30 Nov 2022 22:51:43 GMT
ETag: "3c50-5eeb7f2c55dc0"
Accept-Ranges: bytes
kl.gruplast.com.br/kvk/KvK/roboto-v18-latin-regular.woff2
78.128.112.208200 OK 15 kB URL HTTP/1.1 kl.gruplast.com.br/kvk/KvK/roboto-v18-latin-regular.woff2
IP 78.128.112.208:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
Analyzer Verdict Alert urlquery phishing Phishing - KVK
fortinet Phishing
GET /kvk/KvK/roboto-v18-latin-regular.woff2 HTTP/1.1
Host: kl.gruplast.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://kl.gruplast.com.br/kvk/KvK/styles-40.min.css
Cookie: PHPSESSID=5ehuutsvmf4tirdj483214c012
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 00:55:34 GMT
Content-Length: 15344
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 30 Nov 2022 22:51:43 GMT
ETag: "3bf0-5eeb7f2c55dc0"
Accept-Ranges: bytes
kl.gruplast.com.br/kvk/KvK/roboto-v18-latin-500.woff2
78.128.112.208200 OK 16 kB URL HTTP/1.1 kl.gruplast.com.br/kvk/KvK/roboto-v18-latin-500.woff2
IP 78.128.112.208:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
Analyzer Verdict Alert urlquery phishing Phishing - KVK
fortinet Phishing
GET /kvk/KvK/roboto-v18-latin-500.woff2 HTTP/1.1
Host: kl.gruplast.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://kl.gruplast.com.br/kvk/KvK/styles-40.min.css
Cookie: PHPSESSID=5ehuutsvmf4tirdj483214c012
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 00:55:34 GMT
Content-Length: 15552
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 30 Nov 2022 22:51:43 GMT
ETag: "3cc0-5eeb7f2c55dc0"
Accept-Ranges: bytes
kl.gruplast.com.br/kvk/KvK/CiutadellaRounded-SmBd.woff2
78.128.112.208200 OK 36 kB URL HTTP/1.1 kl.gruplast.com.br/kvk/KvK/CiutadellaRounded-SmBd.woff2
IP 78.128.112.208:0
File type Web Open Font Format (Version 2), CFF, length 36288, version 0.0\012- data
Hash d368f0707a969bf563de27d9edb535e9
218e98c6ac4636517a78a32179e7b2df1eab3076
2ee14c678486082c694e73bbd1553ed2c6198800bb5ca2ef348305dda8f2861c
Analyzer Verdict Alert urlquery phishing Phishing - KVK
fortinet Phishing
GET /kvk/KvK/CiutadellaRounded-SmBd.woff2 HTTP/1.1
Host: kl.gruplast.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://kl.gruplast.com.br/kvk/KvK/styles-40.min.css
Cookie: PHPSESSID=5ehuutsvmf4tirdj483214c012
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 00:55:34 GMT
Content-Length: 36288
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 30 Nov 2022 22:51:43 GMT
ETag: "8dc0-5eeb7f2c55dc0"
Accept-Ranges: bytes
cdn.appdynamics.com/adrum-ext.e4202fb1b0ba7cdba12532dc74bf7403.js
143.204.55.129200 OK 20 kB URL HTTP/1.1 cdn.appdynamics.com/adrum-ext.e4202fb1b0ba7cdba12532dc74bf7403.js
IP 143.204.55.129:0
File type ASCII text, with very long lines (552)
Hash b69e4b4a2f5ba264eb49966eef64d0e8
0ef0a93d2a98270ee5379243ef2fcbe256a15f95
d5e207893aed4d8157d7efffc333bf59de7933c6cb148c0fc7aec9095f83ee6d
GET /adrum-ext.e4202fb1b0ba7cdba12532dc74bf7403.js HTTP/1.1
Host: cdn.appdynamics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kl.gruplast.com.br/
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Tue, 29 Nov 2022 02:00:23 GMT
Server: nginx/1.16.1
Last-Modified: Fri, 07 Dec 2018 00:14:29 GMT
ETag: W/"5c09bb65-c86f"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Cache-Control: public, max-age=2678400, s-max-age=14400
timing-allow-origin: *
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wz1LI2RhsGLCVHA30TVmrl_uAaglqqH7wIKdd5VMt1rbujx-nTXStQ==
Age: 1205711
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ee19f96e42a0eca99d00c8d91f977c35
3bf8dbf8b8ce6ea7adadf7bb92cae2f9502fbee9
6d8adcb1494bfe2ca73cd6b77eb57b2d08e07b05eb892fea98a1fde0bfb2ea12
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1977
Cache-Control: max-age=117854
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 00:55:34 GMT
Etag: "6396ef2b-1d7"
Expires: Wed, 14 Dec 2022 09:39:48 GMT
Last-Modified: Mon, 12 Dec 2022 09:06:51 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
35.163.49.154101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.163.49.154:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YaZMdsuFv1DbmpmGvSZ5oQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: NIUCyUF0KzHv+e+5EoKNcnvBkL8=
col.eum-appdynamics.com/eumcollector/beacons/browser/v1/APP_KEY_NOT_SET/adrum
54.245.191.186200 OK 0 B URL HTTP/1.1 col.eum-appdynamics.com/eumcollector/beacons/browser/v1/APP_KEY_NOT_SET/adrum
IP 54.245.191.186:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /eumcollector/beacons/browser/v1/APP_KEY_NOT_SET/adrum HTTP/1.1
Host: col.eum-appdynamics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: text/plain
Content-Length: 2405
Origin: http://kl.gruplast.com.br
Connection: keep-alive
Referer: http://kl.gruplast.com.br/
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 00:55:36 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
expires: 0
set-cookie: ADRUM_BTa=R:26|g:95a9733f-e50b-48c6-8792-ca30b9083f35;Path=/;Expires=Tue, 13-Dec-2022 00:56:06 GMT;Max-Age=30
ADRUM_BTa=R:26|g:95a9733f-e50b-48c6-8792-ca30b9083f35|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e;Path=/;Expires=Tue, 13-Dec-2022 00:56:06 GMT;Max-Age=30
SameSite=None;Path=/;Expires=Tue, 13-Dec-2022 00:56:06 GMT;Max-Age=30;Secure
ADRUM_BT1=R:26|i:559461;Path=/;Expires=Tue, 13-Dec-2022 00:56:06 GMT;Max-Age=30
ADRUM_BT1=R:26|i:559461|e:3;Path=/;Expires=Tue, 13-Dec-2022 00:56:06 GMT;Max-Age=30
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0
pragma: no-cache
vary: *
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-headers: origin, content-type, accept
x-envoy-upstream-service-time: 0
server: envoy
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8572
Expires: Tue, 13 Dec 2022 03:18:28 GMT
Date: Tue, 13 Dec 2022 00:55:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8572
Expires: Tue, 13 Dec 2022 03:18:28 GMT
Date: Tue, 13 Dec 2022 00:55:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8572
Expires: Tue, 13 Dec 2022 03:18:28 GMT
Date: Tue, 13 Dec 2022 00:55:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8572
Expires: Tue, 13 Dec 2022 03:18:28 GMT
Date: Tue, 13 Dec 2022 00:55:36 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9051770b3587c195bea670f8820e8cfe
abf58087f0e345202da088238daea85d177b431b
f687a10c0ae63699a551977e9a4ec5bc7ba606b1925178d7ed4ec6728889bb2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8841
x-amzn-requestid: 09b64f8e-60c0-4cf6-a0dc-15e597bd9d85
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eMWH7MIAMFyow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa4e-3471ee5f5a78b55c424e2c6d;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: viqtSt0N4FbMvP-u-vlA4Y8SfzIafFu_4XhqXSKrbItp7gkJDp5PKA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 22:37:58 GMT
age: 8258
etag: "abf58087f0e345202da088238daea85d177b431b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff51ff36d-720a-4773-9efc-7923e26a498a.jpeg
34.120.237.76200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff51ff36d-720a-4773-9efc-7923e26a498a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 924ebd73c6a82ba87b3c7140d6cf4968
3fc604e081023ba1d50e57678a9a546b556835c4
d77661e2c8f4d1c86aa152a228ae633c475b97ecd49f39c8a9380214dbd2d664
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff51ff36d-720a-4773-9efc-7923e26a498a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6038
x-amzn-requestid: 78cfe5e5-1298-4df4-bd36-a6f634280f83
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw5BgGq4IAMFSWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903ba3-40c9be7134129b4c249e559c;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:07:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _-pBQeI6EbP8F6fYvUN9ML-zszIBU6AD_CXD7nuGTEdwWWHX43pIcw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 13:20:39 GMT
age: 41697
etag: "3fc604e081023ba1d50e57678a9a546b556835c4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2263c6ae-1846-44f1-8b25-471bca417daf.jpeg
34.120.237.76200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2263c6ae-1846-44f1-8b25-471bca417daf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8b0477fb90d103e2155bbf7ab47d877
ab668e755bd742b165fa3ba46a4c486c616a7ff6
40e2282cf64da6034f73a2ff0c0d060550caa364244d5bdf282d2f54719d48ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2263c6ae-1846-44f1-8b25-471bca417daf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4703
x-amzn-requestid: 975cb427-5feb-4c36-bcfe-bed0cc9bd3b5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czpW4Hh4IAMFeRA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639155c5-63d6d97371f11d6012edae68;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 03:11:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BouIqIrg_vfxBH0weDXiqoEBcSV8_d4qDVB3Er5PeIrZz249iHdqGQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 06:13:00 GMT
age: 67356
etag: "ab668e755bd742b165fa3ba46a4c486c616a7ff6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff80752aa-0cbf-4c22-9021-7abe914dde6f.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff80752aa-0cbf-4c22-9021-7abe914dde6f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1abb84e01b1e6e8d13317083770e9e25
8e034ed23b8d40406fd43f74f0af5f7278d1465e
5238283f759fdf48354b5372bf87c9cc1d5db2dd319db54ac0e09f1e6ac32cbc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff80752aa-0cbf-4c22-9021-7abe914dde6f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12449
x-amzn-requestid: 992fe7fc-089b-4cc8-bb4f-0636b96d5f9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c8I9UFlAoAMFhPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6394bb88-0cf5980b3772bc313c547db9;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 17:02:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hvm1Gg_elrokIugA9BZAQUayP_3EjQc9jPpB3zE4qeRpVdA-yiXJ_Q==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 21:58:25 GMT
age: 10631
etag: "8e034ed23b8d40406fd43f74f0af5f7278d1465e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefb81a20-e06f-4f47-bfa8-916a4837d754.png
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefb81a20-e06f-4f47-bfa8-916a4837d754.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 703d359edb819eaefc6ccae224bbde15
4b8d7b5ff7cf1333bd0019b2d72cf2aadef6caf8
0452d24052bef979fd13f1a0fefb4c7803ff91c5afa3c871f85b73eb08f15489
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefb81a20-e06f-4f47-bfa8-916a4837d754.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12144
x-amzn-requestid: 0d00ec22-808c-4f60-98b1-87eef4aad829
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c6n0yFORIAMFskA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6394201e-58f1a5c87fc341bf56fa9d68;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 05:58:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: sW4dQXExyH6JvbdtSgIPJUiifHh-VfbfcG5hKMaJ4tZA3pO-fobF6w==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 20:36:31 GMT
age: 15545
etag: "4b8d7b5ff7cf1333bd0019b2d72cf2aadef6caf8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ddf7ef-9059-4300-b92b-6b64110b9f4b.jpeg
34.120.237.76200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ddf7ef-9059-4300-b92b-6b64110b9f4b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03525c945d7fcd4de779966e9d277367
c75644ea5fab717e647c05c7c340fe2aa86b9d7f
0b08dfa33a04022a59c1c45c17bba376f70efa63a0e6d2eb144f8392546a837f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ddf7ef-9059-4300-b92b-6b64110b9f4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5293
x-amzn-requestid: d9b060f7-f8b5-4805-9e2b-7a70f812aaf2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c3fMoGSWoAMFhuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6392df1d-6c70207260dac72c5ac3dceb;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 07:09:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2xXYeY_xNHogFC1E9gIXobGFdovRSl0yqOaVoh2L52j6xxT-78OD_A==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 10:02:13 GMT
age: 53603
etag: "c75644ea5fab717e647c05c7c340fe2aa86b9d7f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.quovadisglobal.com/
152.195.132.213200 OK 1.8 kB IP 152.195.132.213:0
Hash 668981a8d894b0f7a6563fd013e92a18
041be14ee79bc010f85ee8bdb949fe0230387209
e51a9ac24644d907b2375f297487d19828c6032f9471c899b547dfaec515231c
POST / HTTP/1.1
Host: ocsp.quovadisglobal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 00:55:36 GMT
Etag: "041be14ee79bc010f85ee8bdb949fe0230387209"
Expires: Thu, 15 Dec 2022 00:55:35 GMT
Last-Modified: Tue, 13 Dec 2022 00:55:36 GMT
Server: Apache
Content-Length: 1778
ocsp.quovadisglobal.com/
152.195.132.213200 OK 1.8 kB IP 152.195.132.213:0
Hash 668981a8d894b0f7a6563fd013e92a18
041be14ee79bc010f85ee8bdb949fe0230387209
e51a9ac24644d907b2375f297487d19828c6032f9471c899b547dfaec515231c
POST / HTTP/1.1
Host: ocsp.quovadisglobal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 00:55:36 GMT
Etag: "041be14ee79bc010f85ee8bdb949fe0230387209"
Expires: Thu, 15 Dec 2022 00:55:35 GMT
Last-Modified: Tue, 13 Dec 2022 00:55:36 GMT
Server: Apache
Content-Length: 1778
idp.kvk.nl/incl/img/favicons/favicon-16x16.png
176.117.57.39200 OK 628 B URL HTTP/1.1 idp.kvk.nl/incl/img/favicons/favicon-16x16.png
IP 176.117.57.39:0
ASN #13127 T-mobile Netherlands B.V.
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 55a8718f70b2acf653a4ce97e58dd77b
258924d396712c495cf5ac45cb30ac3978832321
2ef6fa3e537096769e506a7b3cab969e0a6381a1d808c65184073705e03cf0ba
GET /incl/img/favicons/favicon-16x16.png HTTP/1.1
Host: idp.kvk.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kl.gruplast.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 00:55:37 GMT
Content-Type: image/png
Content-Length: 628
Last-Modified: Tue, 22 Nov 2022 10:03:59 GMT
Connection: keep-alive
ETag: "637c9e8f-274"
X-Frame-Options: ALLOW-FROM https://www.kvk.nl
Content-Security-Policy: default-src 'self' https:; frame-src 'self' *.kvk.nl www.googletagmanager.com channel.me; child-src 'self' *.kvk.nl www.googletagmanager.com; style-src 'self' 'unsafe-inline' 'sha256-LXt7XNkn/2MTBhkM6UrDlImJls49N3+nP/XjFrNZyO4=' 'sha256-XOtkL7J6b1t1npfOhdUBs+5zK19X9cQqV+Gkx5Iyi9c=' 'sha256-biLFinpqYMtWHmXfkA1BPeCY0/fNt46SAZ+BBk5YUog=' *.kvk.nl tagmanager.google.com *.abtasty.com; script-src 'self' *.kvk.nl 'sha256-MVbmkMrCnNvlP+CtKIvSQxv9jOMgh76a+AXA4AAYeXM=' 'sha256-EeeULpREplDSZUSVW97YrBpzPCltPT/BgVivzUtuZwM=' 'sha256-hOPCmehScODLmTSR/o9pYczIAOjcmL1uX4VIXwhpA/0=' 'sha256-J7jh02bY5XpfB46dMU6WhRuxJIhrlsogecWvmMf0L4s=' 'sha256-24IzoXDMR1YFS0cUiDP0RAWgUKo0aVMFsbETQkT+8nI=' 'sha256-UoBWnncEL3DVKKBul8ZcKsWvnqToPismbvH/oTgY1sk=' 'sha256-FhBEYqH/PIMN7W5yRm3uUyUknAx+/i+4XybC1s6TOl4=' 'sha256-aXNGsfOuZuJfBrjGJCfWJ7hhgVH6whLUdE52hA50TyU=' 'sha256-/n52hISYJLrxZqQO0+rd/+yql3bgxmVCGnDGLZaIu64=' 'sha256-0+J0nxwnNnbyOzbh6tR+MjgdRNomC/T71ljBc3/XQtM=' blob: www.google-analytics.com www.googletagmanager.com tagmanager.google.com *.abtasty.com channel.me; img-src 'self' *.kvk.nl blob: data: www.google-analytics.com www.googletagmanager.com *.abtasty.com *.cloudfront.com; font-src 'self' blob: data: *.kvk.nl *.abtasty.com; connect-src 'self' *.kvk.nl www.google-analytics.com col.eum-appdynamics.com *.abtasty.com; frame-ancestors 'self' *.kvk.nl; base-uri 'self' *.kvk.nl;
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Strict-Transport-Security: max-age=157680002
idp.kvk.nl/incl/img/favicons/apple-touch-icon.png
176.117.57.39200 OK 4.7 kB URL HTTP/1.1 idp.kvk.nl/incl/img/favicons/apple-touch-icon.png
IP 176.117.57.39:0
ASN #13127 T-mobile Netherlands B.V.
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 8c98d8bc5b4c524bc97d37b7c132d224
d77e424600aff3084c0a9ccdd044d08f4d3fd4ea
7cac80925174b46a50c2c5f73ff9397ce21a78d9038c5842e2345ae76535e068
GET /incl/img/favicons/apple-touch-icon.png HTTP/1.1
Host: idp.kvk.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kl.gruplast.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 00:55:37 GMT
Content-Type: image/png
Content-Length: 4656
Last-Modified: Tue, 22 Nov 2022 10:03:59 GMT
Connection: keep-alive
ETag: "637c9e8f-1230"
X-Frame-Options: ALLOW-FROM https://www.kvk.nl
Content-Security-Policy: default-src 'self' https:; frame-src 'self' *.kvk.nl www.googletagmanager.com channel.me; child-src 'self' *.kvk.nl www.googletagmanager.com; style-src 'self' 'unsafe-inline' 'sha256-LXt7XNkn/2MTBhkM6UrDlImJls49N3+nP/XjFrNZyO4=' 'sha256-XOtkL7J6b1t1npfOhdUBs+5zK19X9cQqV+Gkx5Iyi9c=' 'sha256-biLFinpqYMtWHmXfkA1BPeCY0/fNt46SAZ+BBk5YUog=' *.kvk.nl tagmanager.google.com *.abtasty.com; script-src 'self' *.kvk.nl 'sha256-MVbmkMrCnNvlP+CtKIvSQxv9jOMgh76a+AXA4AAYeXM=' 'sha256-EeeULpREplDSZUSVW97YrBpzPCltPT/BgVivzUtuZwM=' 'sha256-hOPCmehScODLmTSR/o9pYczIAOjcmL1uX4VIXwhpA/0=' 'sha256-J7jh02bY5XpfB46dMU6WhRuxJIhrlsogecWvmMf0L4s=' 'sha256-24IzoXDMR1YFS0cUiDP0RAWgUKo0aVMFsbETQkT+8nI=' 'sha256-UoBWnncEL3DVKKBul8ZcKsWvnqToPismbvH/oTgY1sk=' 'sha256-FhBEYqH/PIMN7W5yRm3uUyUknAx+/i+4XybC1s6TOl4=' 'sha256-aXNGsfOuZuJfBrjGJCfWJ7hhgVH6whLUdE52hA50TyU=' 'sha256-/n52hISYJLrxZqQO0+rd/+yql3bgxmVCGnDGLZaIu64=' 'sha256-0+J0nxwnNnbyOzbh6tR+MjgdRNomC/T71ljBc3/XQtM=' blob: www.google-analytics.com www.googletagmanager.com tagmanager.google.com *.abtasty.com channel.me; img-src 'self' *.kvk.nl blob: data: www.google-analytics.com www.googletagmanager.com *.abtasty.com *.cloudfront.com; font-src 'self' blob: data: *.kvk.nl *.abtasty.com; connect-src 'self' *.kvk.nl www.google-analytics.com col.eum-appdynamics.com *.abtasty.com; frame-ancestors 'self' *.kvk.nl; base-uri 'self' *.kvk.nl;
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Strict-Transport-Security: max-age=157680002