Overview

URLprintearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
IP 162.214.12.116 (United States)
ASN#46606 UNIFIEDLAYER-AS-1
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-10-04 05:38:50 UTC
StatusLoading report..
IDS alerts0
Blocklist alert9
urlquery alerts
8
Phishing - J.P.Morgan
Tags None

Domain Summary (9)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-10-04 00:45:50 UTC 143.204.55.115
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-03 08:07:24 UTC 143.204.55.49
img-getpocket.cdn.mozilla.net (7) 1631 2017-09-01 03:40:57 UTC 2022-10-04 04:18:32 UTC 34.120.237.76
cdnjs.cloudflare.com (1) 235 2020-10-20 10:17:36 UTC 2022-10-04 04:47:48 UTC 104.17.25.14
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-10-04 02:06:24 UTC 93.184.220.29
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-03 09:28:24 UTC 54.148.17.90
r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-10-03 07:33:36 UTC 23.36.77.32
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-03 09:28:24 UTC 34.117.237.239
printearte.com.br (19) 0 2015-09-10 12:44:08 UTC 2022-10-03 15:08:02 UTC 162.214.12.116 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-04 2 printearte.com.br/a2/js/jquery.player.js Phishing
2022-10-04 2 printearte.com.br/a2/js/jquery.CardValidator.js Phishing
2022-10-04 2 printearte.com.br/a2/js/jquery.validate.min.js Phishing
2022-10-04 2 printearte.com.br/a2/js/jquery.min.js Phishing
2022-10-04 2 printearte.com.br/a2/img/logo.svg Phishing
2022-10-04 2 printearte.com.br/a2/fonts/opensans-regular.ttf Phishing
2022-10-04 2 printearte.com.br/a2/fonts/dcefont.woff Phishing
2022-10-04 2 printearte.com.br/a2/img/icon.ico Phishing
2022-10-04 2 printearte.com.br/a2/img/background.desktop.14.jpeg Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 162.214.12.116
Date UQ / IDS / BL URL IP
2023-03-21 00:07:04 +0000 0 - 1 - 0 printearte.com.br/s3c/auth.php?NKgYObEUkvwhzx (...) 162.214.12.116
2023-03-20 18:24:47 +0000 0 - 1 - 0 printearte.com.br/d5n/auth.php?md=msndxfhcrgj (...) 162.214.12.116
2023-03-20 08:19:16 +0000 0 - 0 - 1 printearte.com.br/s3c/auth.php 162.214.12.116
2023-02-04 12:58:33 +0000 0 - 0 - 19 printearte.com.br/fx3/auth.php?md=tNdYoaBTImb (...) 162.214.12.116
2023-01-28 10:14:36 +0000 0 - 0 - 20 printearte.com.br/fx3/auth.php?md=tNdYoaBTImb (...) 162.214.12.116


Last 5 reports on ASN: UNIFIEDLAYER-AS-1
Date UQ / IDS / BL URL IP
2023-03-31 19:13:45 +0000 0 - 0 - 8 homebuyermaine.com/new/h2uukm/tom.modrowski@s (...) 69.49.247.70
2023-03-31 19:13:19 +0000 0 - 13 - 6 ehmtvey.ga/ 162.240.233.69
2023-03-31 18:55:39 +0000 0 - 0 - 3 www.mpostal.com/ 192.185.215.14
2023-03-31 18:50:27 +0000 0 - 0 - 4 1134127584.imxlg.com/.mail.mil/1201887079/7hq (...) 192.185.106.200
2023-03-31 18:46:18 +0000 0 - 0 - 3 59470713.imxlg.com/.pbscopy.com/1628432223/mu (...) 192.185.106.200


Last 5 reports on domain: printearte.com.br
Date UQ / IDS / BL URL IP
2023-03-21 00:07:04 +0000 0 - 1 - 0 printearte.com.br/s3c/auth.php?NKgYObEUkvwhzx (...) 162.214.12.116
2023-03-20 18:24:47 +0000 0 - 1 - 0 printearte.com.br/d5n/auth.php?md=msndxfhcrgj (...) 162.214.12.116
2023-03-20 08:19:16 +0000 0 - 0 - 1 printearte.com.br/s3c/auth.php 162.214.12.116
2023-02-04 12:58:33 +0000 0 - 0 - 19 printearte.com.br/fx3/auth.php?md=tNdYoaBTImb (...) 162.214.12.116
2023-01-28 10:14:36 +0000 0 - 0 - 20 printearte.com.br/fx3/auth.php?md=tNdYoaBTImb (...) 162.214.12.116


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-24 19:04:38 +0000 9 - 0 - 14 www.serenk.com/v2/wp-admin/network/chase/index.php 212.58.20.2
2023-01-24 18:17:31 +0000 9 - 0 - 14 www.serenk.com/v2/wp-admin/network/chase/index.php 212.58.20.2
2023-01-24 09:14:45 +0000 9 - 0 - 11 www.serenk.com/v2/wp-admin/network/chase/index.php 212.58.20.2
2023-01-24 08:40:13 +0000 9 - 0 - 14 www.serenk.com/v2/wp-admin/network/chase/index.php 212.58.20.2
2023-01-24 05:15:38 +0000 9 - 0 - 10 www.serenk.com/v2/wp-admin/network/chase/ 212.58.20.2

JavaScript

Executed Scripts (7)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 4) - SHA256: b1ab1e892617f210425f658cf1d361b5489028c8771b56d845fe1c62c1fbc8b0
2022


HTTP Transactions (38)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 04:47:04 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3YTzeaUSqwBdHt0uYaliEwx0PQ6ZCIq8tANq8HwIsbdQQgBrbo0kbg==
Age: 3095


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.49
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0GbS0WhPbz549tMZa0dPKZEltTmWBaobiiqZK3TNs5uzIRr_hBtQ8g==
age: 612
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11417
Expires: Tue, 04 Oct 2022 08:48:56 GMT
Date: Tue, 04 Oct 2022 05:38:39 GMT
Connection: keep-alive

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 04 Oct 2022 05:38:39 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI= HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 04 Oct 2022 05:38:39 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92; path=/
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 26145
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (478), with CRLF line terminators
Size:   26145
Md5:    2150a70498a0b56b5d67ed1ca2d08b4e
Sha1:   65c29b3a3526d114012e0fd1194331d7ce6e96d1
Sha256: f65e4062e9714ee0da3a53393753dfe719a3932594eb9b94b97a308823f24d52
                                        
                                            GET /ajax/libs/jquery.mask/1.14.10/jquery.mask.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://printearte.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Tue, 04 Oct 2022 05:38:39 GMT
content-length: 4517
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-4e98"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 3577105
expires: Sun, 24 Sep 2023 05:38:39 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lj%2BwAO%2B7LRZlnIuqFO1VbQSxFl5yIainUkf%2BG1SLfComA%2Bx8fcuPpp8q%2B5TOitG6VNzR0JdymX5iFNpIRNTqtKg46PjPF%2B5ynulGaZn6BXa4R%2FH4BOmSaXZ4r7%2FllX8GuYk2u1Op"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 754b92971bb4b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   4517
Md5:    e40e054c5726f042bad463e3774a2777
Sha1:   5c9413b72837a440b327444104830c35ae3b052c
Sha256: fcc8a86d2e89e8fbe9815d50c23bf205191ab8a6c0bec67358cd975d94283ff8
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 04 Oct 2022 05:29:33 GMT
Expires: Tue, 04 Oct 2022 06:11:15 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xXUWYFo0pWijyc09ueU18NhGjmwqUqzcwPzP75R-6iD8oW7RbSJ-jg==
Age: 546


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /a2/js/jquery.player.js HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 04 Oct 2022 05:38:39 GMT
Server: Apache
Last-Modified: Fri, 24 Sep 2021 12:01:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 9898
Keep-Alive: timeout=5, max=99


--- Additional Info ---
Magic:  ASCII text, with very long lines (50474), with no line terminators
Size:   9898
Md5:    695bd64db63b7a4f57dd754ca4995ff9
Sha1:   d7261e2734398547598f0aec0928dcfba013bff2
Sha256: 567098561f01f59a54728573b1f8df8522b279be26954e5904145305bde2eada

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /a2/js/jquery.CardValidator.js HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 04 Oct 2022 05:38:40 GMT
Server: Apache
Last-Modified: Mon, 28 Aug 2017 18:03:08 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 2083
Keep-Alive: timeout=5, max=100


--- Additional Info ---
Magic:  ASCII text
Size:   2083
Md5:    5e3812c918f22e125f3ea8c08bceaf76
Sha1:   d5e6624b80474ea77e1adb60db6b0ded24205627
Sha256: 31d0740c9a71776c253640a6915be5b120d3e90b6765d1d46f94c72a908b185e

Alerts:
  urlquery:
    - Phishing - J.P.Morgan
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /a2/js/jquery.validate.min.js HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 04 Oct 2022 05:38:40 GMT
Server: Apache
Last-Modified: Sat, 11 Aug 2018 09:12:40 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 8046
Keep-Alive: timeout=5, max=100


--- Additional Info ---
Magic:  ASCII text, with very long lines (833), with CRLF line terminators
Size:   8046
Md5:    0d22a2c375340d6f68c7832f5bda6a01
Sha1:   16dfdcf36be9b17505177bf189baa072391da753
Sha256: 045beaf8c0f59e447b3bc0e6aa42da1c9cc563bf68eedcdd17f378afd0a084fe

Alerts:
  urlquery:
    - Phishing - J.P.Morgan
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6559
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 05:38:40 GMT
Last-Modified: Tue, 04 Oct 2022 03:49:21 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /a2/css/lostyle.css HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 04 Oct 2022 05:38:40 GMT
Server: Apache
Last-Modified: Wed, 08 Apr 2020 17:00:34 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 15956
Keep-Alive: timeout=5, max=100


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   15956
Md5:    8caeecf9afc9290ddb1fddd0dc6631d1
Sha1:   9e2b379226bfc47b963fe33dd4ecb71da056eedd
Sha256: 7d27898c3d4e3e2f6bfce2d14c1bface75802ae741d44364c41e0be93698a17d

Alerts:
  urlquery:
    - Phishing - J.P.Morgan
                                        
                                            GET /a2/js/jquery.min.js HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 04 Oct 2022 05:38:40 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 04:17:40 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 40021
Keep-Alive: timeout=5, max=100


--- Additional Info ---
Magic:  ASCII text, with very long lines (568)
Size:   40021
Md5:    514a4c838e493228ce16d0b1b5914751
Sha1:   78b1e5eaef6056170d8995820ae5277fe5c9a7a5
Sha256: 4f0974852ba99efb4adb48759d70ea2dc69e7a9f9a824f9947d1a136c8145565

Alerts:
  urlquery:
    - Phishing - J.P.Morgan
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /a2/css/style.css HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 04 Oct 2022 05:38:39 GMT
Server: Apache
Last-Modified: Fri, 03 Apr 2020 17:40:52 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   68491
Md5:    4bb7500c8e365a32a7430a3eb3c16f67
Sha1:   286b2e8c9959b219109e21f52c6ef54975e7a172
Sha256: a6745a01df880c2b8abc2b129a84ce094865e8bc132399f40791f07c13ecfaf4

Alerts:
  urlquery:
    - Phishing - J.P.Morgan
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KveqVSncCUlrR9bDiPPcQw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.148.17.90
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9dSToBKLRFMBTZGOeBn9qpfCwRk=

                                        
                                            GET /a2/img/congra.png HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 04 Oct 2022 05:38:40 GMT
Server: Apache
Last-Modified: Mon, 02 Dec 2019 14:22:14 GMT
Accept-Ranges: bytes
Content-Length: 22060
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=99


--- Additional Info ---
Magic:  PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size:   22060
Md5:    1cb46cbb550a7047d40ff30244ca144b
Sha1:   8c41692d4a18624338f9ec32f569b028aa20f827
Sha256: 065a5ede3e090578c581c77883c6acfa9dc9393efc2f19775cfb410263fa8e1c
                                        
                                            GET /a2/img/aioe_icon_1_pid_lg.png HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 04 Oct 2022 05:38:40 GMT
Server: Apache
Last-Modified: Mon, 20 Sep 2021 14:51:00 GMT
Accept-Ranges: bytes
Content-Length: 4004
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=99


--- Additional Info ---
Magic:  PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced\012- data
Size:   4004
Md5:    210d4f89d07fe1f8fd4d9a319e63933f
Sha1:   8b9f60d4c9368881d3cfb41fb7426675e03619db
Sha256: 8e2e5ed99b3cf11d88f281c0ad9ac0aaa30c311515536c8a9c90be58ca56ec39
                                        
                                            GET /a2/img/aioe_icon_3_devices_lg.png HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 04 Oct 2022 05:38:40 GMT
Server: Apache
Last-Modified: Mon, 20 Sep 2021 14:54:26 GMT
Accept-Ranges: bytes
Content-Length: 3677
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=99


--- Additional Info ---
Magic:  PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced\012- data
Size:   3677
Md5:    33ac311a458863ee4fc16b6fae4a40b5
Sha1:   9b65fd7af34bdaaddcde363383114f706b335ad8
Sha256: e457f20d64d186c61a8467fe70d4eec890ed7fb85d5de2a9fc31834567131a1f
                                        
                                            GET /a2/img/alert.gif HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 04 Oct 2022 05:38:40 GMT
Server: Apache
Last-Modified: Mon, 06 Apr 2020 21:12:04 GMT
Accept-Ranges: bytes
Content-Length: 6926
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=99


--- Additional Info ---
Magic:  GIF image data, version 89a, 240 x 240\012- data
Size:   6926
Md5:    6b3fe3fcfdc8a4f64ce935194f5591ab
Sha1:   64d7c83fa447c9b84997b034d8434155ae53163e
Sha256: 86a86f9ba8a23418cb079bbf61fe64974770fb416a27384ef80045976487894e
                                        
                                            GET /a2/img/emdef213.png HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 04 Oct 2022 05:38:40 GMT
Server: Apache
Last-Modified: Sat, 04 Apr 2020 20:34:26 GMT
Accept-Ranges: bytes
Content-Length: 26120
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=98


--- Additional Info ---
Magic:  PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size:   26120
Md5:    f97e9297a90a73c16b5734c0910785ce
Sha1:   d9df719d58da061ccf75349314e562f8b22b76d3
Sha256: 9f926e83679171e34c289ff3aa5b7f067e75cfa564345f53941ca824c42d5f77
                                        
                                            GET /a2/img/logo.svg HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/css/lostyle.css
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Tue, 04 Oct 2022 05:38:40 GMT
Server: Apache
Last-Modified: Fri, 03 Apr 2020 16:54:14 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 645
Keep-Alive: timeout=5, max=98


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text
Size:   645
Md5:    d9f9bf9d31b5f774a174920f02af0cbd
Sha1:   32207860ceec665b5e3e43cb93964942d8c95494
Sha256: 152fa82655f284db8ec59d3a30631f9ebdb0e2ef44e94801d0a569881f39f956

Alerts:
  urlquery:
    - Phishing - J.P.Morgan
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /a2/fonts/opensans-regular.ttf HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: x-font/ttf
                                        
Date: Tue, 04 Oct 2022 05:38:40 GMT
Server: Apache
Last-Modified: Wed, 15 Apr 2020 08:35:48 GMT
Accept-Ranges: bytes
Cache-Control: max-age=0
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 24702
Keep-Alive: timeout=5, max=98


--- Additional Info ---
Magic:  TrueType Font data, 19 tables, 1st "FFTM", 18 names, Microsoft, language 0x409, Digitized data copyright \251 2010-2011, Google Corporation.Open SansRegularAscender - Open Sans\012- data
Size:   24702
Md5:    813f15507201fff80e70d44b3625ed33
Sha1:   e064bf094b063661d54592ec1ce7922848d9081c
Sha256: 75fc65ef4942d7905326db1102af7dc166908c1abe070537c5589f629bfadb16

Alerts:
  urlquery:
    - Phishing - J.P.Morgan
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /a2/img/loading.gif HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 04 Oct 2022 05:38:40 GMT
Server: Apache
Last-Modified: Sat, 11 Aug 2018 08:03:50 GMT
Accept-Ranges: bytes
Content-Length: 38636
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=99


--- Additional Info ---
Magic:  GIF image data, version 89a, 200 x 200\012- data
Size:   38636
Md5:    d10ef01e81faa2c2d812bdf670b4e072
Sha1:   77d09a57b2091fd7665dff763a5eab23e0ff907e
Sha256: 5e3d5246b17e19e65385092db07554d8e1c5c4a226a6d7f97824b8e1e8571e34
                                        
                                            GET /a2/img/aioe_icon_2_card_lg.png HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 04 Oct 2022 05:38:40 GMT
Server: Apache
Last-Modified: Mon, 20 Sep 2021 14:53:10 GMT
Accept-Ranges: bytes
Content-Length: 3262
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=97


--- Additional Info ---
Magic:  PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced\012- data
Size:   3262
Md5:    b8ce783abcee5ceb012b84d6f275b908
Sha1:   ef64977d3f752bdefd0df2360600908ef8575324
Sha256: ec7a2e669f551ad0588a2ce4b1ee04fd5ae9ee16042fc97d022c6b287b9a6494
                                        
                                            GET /a2/fonts/dcefont.woff HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://printearte.com.br/a2/css/style.css
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: x-font/woff
                                        
Date: Tue, 04 Oct 2022 05:38:40 GMT
Server: Apache
Last-Modified: Fri, 03 Apr 2020 17:34:38 GMT
Accept-Ranges: bytes
Content-Length: 70296
Cache-Control: max-age=0
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=98


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 70296, version 0.0\012- data
Size:   70296
Md5:    2ec43bffa4424b28d0cc96b37cca33a4
Sha1:   1cde2661fb95ece87155c7931d5da6911331ef43
Sha256: 6ea71f4189e78297e3d1834c586a10dd39826ed8361cb1268b847cef45e03cb1

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /a2/img/icon.ico HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Tue, 04 Oct 2022 05:38:41 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 05:43:34 GMT
Accept-Ranges: bytes
Content-Length: 32038
Cache-Control: max-age=0
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=97


--- Additional Info ---
Magic:  MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size:   32038
Md5:    5744986eb3dc6f2da92157a651889902
Sha1:   5a558b58498fab2aeb742acdab51e0c2fbc78385
Sha256: 625816f80596303e9de8e68695973369faa462b416202825b03899c781464fb9

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Tue, 04 Oct 2022 08:33:34 GMT
Date: Tue, 04 Oct 2022 05:38:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Tue, 04 Oct 2022 08:33:34 GMT
Date: Tue, 04 Oct 2022 05:38:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Tue, 04 Oct 2022 08:33:34 GMT
Date: Tue, 04 Oct 2022 05:38:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Tue, 04 Oct 2022 08:33:34 GMT
Date: Tue, 04 Oct 2022 05:38:41 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4fcdf5f2-fb82-429f-a6f0-8f79d8aa9106.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9455
x-amzn-requestid: c7e1aa21-0afd-4329-a886-ca52e1a30c7e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcqJXHLUIAMFU1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5708-1905710834041431314b11be;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:41:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: D-2NszpZ31D2YAbZRcPdqN3zZ2ScANt6bokfSbANgnsXBoTF2d__AQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:08:09 GMT
age: 27032
etag: "cf021352d993967e78552b275424ff139e4ef66c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9455
Md5:    50556325e5a38a5dd7802b1391815bcb
Sha1:   cf021352d993967e78552b275424ff139e4ef66c
Sha256: 96fd2e848a45d071e334a8d08c8b89215f80f01f947af6da2efaee72dd16914c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fec31ab6c-46f2-4d77-a807-9f14bb5073bc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11955
x-amzn-requestid: ce6bbe93-95b0-4b6e-a8bc-012796485e67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zcqb9FUtoAMF0WQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b577f-59dc0a18523f900a059aa5df;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:43:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: tJwzKfs7HnQ7dVcINwnlzxTChXiEi4JPj8jrS8p5KhurRx_o3ZVOZQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:10:59 GMT
etag: "e2ea2ef6805e391c497e62e101e76a0bdecfce64"
age: 26862
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11955
Md5:    54b3ef7aa50273b78b59c24511b0c1f9
Sha1:   e2ea2ef6805e391c497e62e101e76a0bdecfce64
Sha256: 296e8954022d5160137b3e02ab5085a15cee7c23cd6d4ca61b36880706062457
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92e2742a-a49a-4d87-a767-7dbb56cff473.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6107
x-amzn-requestid: 6516bfcd-d6a5-4f46-81fa-ef6033e21aa7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcqO7GXOoAMF8hQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b572c-27fb158e152659380e27c292;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:42:04 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9kLVyQMWmdeqQA58wyOQKBE9yEUxl5DxnG7J8Ozm-xuHD0PW_8SR2g==
via: 1.1 7514e5e25722778fd4b1744d4ecc67e0.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:54:16 GMT
age: 27865
etag: "291232594a2f3170afed3b4814e3a11233d0f05e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6107
Md5:    1f0977129995c466e4710e0ae4304d3e
Sha1:   291232594a2f3170afed3b4814e3a11233d0f05e
Sha256: 80927a148dff4908b799b9f6d167769e68346491092520f5e3638b0f8b5d55a3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0001afba-471a-49f7-bb38-3d4741a9581b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9708
x-amzn-requestid: 7cfcaf0d-1663-47d7-b08e-be3d0c39e035
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcqFjHB5IAMFjYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b56f0-04c5da1940a620507649b822;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: V5EjIZq5-ifuD25S3kj8Bl3SbZH10tm6DII-oRZVci4ic7Za7btGFw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:45:44 GMT
age: 24777
etag: "dc7bc4a378c0ddcd81e51046d21ed02b8be11a92"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9708
Md5:    90fead0b9104991552ce689230661d48
Sha1:   dc7bc4a378c0ddcd81e51046d21ed02b8be11a92
Sha256: 94a1a4199f7cb7bc0b48b00aec745e89f2c65dadd905b27879d39347deb44496
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 04:42:53 GMT
age: 3348
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6315
Md5:    206fb65e75dbadf119512f71e0b78402
Sha1:   58ff0bf8ce7528b303d28bab01a80ad721705569
Sha256: 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd3966c4-a932-4eb5-a3bf-ca25cde92ccb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5317
x-amzn-requestid: 84ffe752-ae82-4fb6-9b29-9b69a3a3dcdf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHuGEjIAMF8Bw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-3717ba3f22da06bc791b20b6;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: RPvILihWx8WSUuIbF2SJ7LFFvmFTqz4jZmMGGhWRbLBosa1mp0o0vg==
via: 1.1 1949caaabae48a894fcd770a3e1384f6.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:54:57 GMT
age: 27824
etag: "4d208807e10e73309811101ef2d26ff33b642585"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5317
Md5:    a0927f94dd9e0cc7272f77972048658c
Sha1:   4d208807e10e73309811101ef2d26ff33b642585
Sha256: 3f184d9ba1588d451dfe5e4dfd84456ce533cbccaf1390ad423e1c6d38c8a35b
                                        
                                            GET /a2/img/background.desktop.14.jpeg HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=vAGfuJMpYyRkclHBNaPI&vAGfuJMpYyRkclHBNaPI=
Cookie: PHPSESSID=05735898cb0a658cc0d7f23930569d92

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 04 Oct 2022 05:38:40 GMT
Server: Apache
Last-Modified: Wed, 22 Sep 2021 11:58:08 GMT
Accept-Ranges: bytes
Content-Length: 231664
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=98


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data
Size:   231664
Md5:    269a039fa2082a078ff28379a60ec21e
Sha1:   6335639be189af9647ec40dd665a6d0edbfe3781
Sha256: ba35513b1c2eac1c940a394568dd6e2b60e0460761b1f053bb20b67d9b5ebb8a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5504
x-amzn-requestid: 37405eb0-5c75-46a9-84c0-e8ed726995d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHvHPvoAMF3mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-77fd550b58af612525e74761;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Ovm2wuk28PygH4EZNEUoPchoHQggWCyXbYHOjMV1tZmfyDrL6PjPZA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:29:19 GMT
age: 25769
etag: "20ef861be49c652a938e0145e4ca3a60159367e2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5504
Md5:    6c6882c60d7ca6f918c77104e3ad1d52
Sha1:   20ef861be49c652a938e0145e4ca3a60159367e2
Sha256: 861f5870990fbd2939d151ae18384cf311e87067ca9a50818efe0c2d51b83088