{"report_id":"bb9b881e-2a1a-484c-8d2f-93c58930c3e9","version":6,"status":"done","tags":[],"date":"2026-03-24T02:32:24Z","url":{"schema":"http","addr":"procedimentos.mav.com.br/","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":0,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"procedimentos.mav.com.br/","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"title":"Materiais de apoio","dom":{"size":149944,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13056)","md5":"74720f056c7307466c3e8bc0917208db","sha1":"eae5fb0af478c1ec9624cf2359d8e2ad3757fa88","sha256":"dea05b5dc9b2465cd0351293a90c7c45f70173e28621a1effd39d4db7c181081","sha512":"ec00aa025f9ac7000f5a04a1f3dae7ccd353f6a67fe30799cfb3cc57190fd350535eaaa832d317dfb7c25e042d57d620de9e1840a4c5e42b5de7c845922d41fc","ssdeep":"3072:zqOwBOzCfRh7uEBJLpUNXpzKEDvC7pXWrvlDVZOTZk:zqeH","tlshash":"3ce387a3a3e315b7010fb5c0a9982e1cbd51e283dd518461b7bd03b46f71deea9432b6","dom_hash":"domhash55316e2e9def02b93818c75909c5254f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"procedimentos.mav.com.br/","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":0,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T02:32:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-24","alert":"Hunting_JS_WebAssembly","trigger":"procedimentos.mav.com.br/lib/requirejs.php/1681152964/core/first.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-24","alert":"Hunting_JS_WebAssembly","trigger":"procedimentos.mav.com.br/lib/requirejs.php/1681152964/core_form/events.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null},"summary":[{"fqdn":"procedimentos.mav.com.br","ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"domain_registered":"2002-05-15","domain_rank":0,"first_seen":"2025-09-07T17:23:01.362414Z","last_seen":"2025-12-21T07:50:17.866002Z","alert_count":0,"request_count":34,"received_data":22372420,"sent_data":20713,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]},{"name":"Moodle","description":"Moodle is a free and open-source Learning Management System (LMS) written in PHP and distributed under the GNU General Public License.","website":"https://moodle.org","common_platform_enumeration":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","icon":"Moodle.png","categories":["LMS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":2,"received_data":87942,"sent_data":1118,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":28791,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/javascript.php/1681152964/lib/requirejs/require.min.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f53ac504f7e69a6df96140eed2d4df2","sha1":"da00136dd3fd0ccab626d7555ccb5fdf1c096fad","sha256":"9ce0dbd6a1df9332653e27d1ddc505c5b78fd82b4112de0ec63840c3fbe0b8c2","sha512":"84eee089ccb30386ada288f6df29a24bfe7297f2533354cdfae0814c90fa25c628e5c487e0220bf20870975b844c473f82ab59648033978079f3a31382a58df0","ssdeep":"384:bv0q1f+PooH82TV0kGznHnEDb0Cvy1Vm7g885cT8r55ken+5tMq8Qatwebl4:7fAooH8x3LHnEDRvy1I7RXT8r3/nYMqp","tlshash":"3382d9ee3ae6f913a26222f4406f504e537bd993140dc154f619e8f5acb8164a6b3e3c","size":17737,"data":"","first_seen":"2023-03-07T01:07:30Z","last_seen":"2026-04-05T04:58:49.968686Z","times_seen":5329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"94f7d3abea72845c95f1b3d96e8cba84","sha1":"f8d9bbfe60a6d326a49a3dbeadba5b2ddc3b2ade","sha256":"279453cb4b2d4bb932f2892939cc56a83111151270ffd3c3791ce81b3db86ca8","sha512":"d33cf386f4ea467238abdd21a0a4d40ce112e41b0897b916892ecc14b58aef462e9e2b72db3799cfcb26c7fdfcfe1ad2812adde75b5a5709a2594b77eb9edce3","ssdeep":"192:WqxdXo2VOpVT1ukdVx2dBhIjL1/oUYKDhwYRkZCFrISalI/I+oscLluePopKcXiF:1bXo2VOpVT1BOwt0ZD5SA+MpLgxi","tlshash":"91525cdb91990a83efa9cedab8462ec5022ed2c51d9c1922cb5d1f8c568360c53ce1f7","size":13220,"data":"","first_seen":"2026-03-24T02:32:33.773548Z","last_seen":"2026-03-24T02:32:33.773548Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/theme/yui_combo.php?m/1681152964/core/event/event-min.js\u0026m/1681152964/filter_mathjaxloader/loader/loader-min.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"76617687325f67884815a9b2b0d4e2be","sha1":"2f7b8734ca64306dad757d2a89fbd2dbb3cdb2fa","sha256":"01e644698fc787a38c18a7312893aaf9081b994f57f059ba3274361f7b09b206","sha512":"b57a28057b145bd4278e9f087c86476246b73c516463f2a1ac69875bf0092affb946d5c4bb932803fc571ec5f01622f63da3faa00ef608d05d86206875bf9401","ssdeep":"","tlshash":"7c51f189365c3c32416b639da3af318638b626cb121b851534254cd858bde4f45afbee","size":2627,"data":"","first_seen":"2023-03-07T13:02:37Z","last_seen":"2026-04-05T03:16:36.749962Z","times_seen":2276,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/requirejs.php/1681152964/core/first.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bd9b7011801b347e3e01c9a6362ea4d","sha1":"8d6341b4b0c10383e8029b93ec2dcf6f656069b5","sha256":"e5d7bc2bd57b9baf5d67555077c81ea195a26c161a2cf69eb3b994ce7a150bfd","sha512":"d2c56971fa4eda436bacb3db037a2b1ed5cef7510b27897ee352bba09f6e3fdcd3d27c577ebb7d99f703c8be6fa51d77870d46be52daf3451c3f4333bfce4082","ssdeep":"49152:LdGN3lvidd+nS2OGZO4m0DgQgf6ydZXZ5tbqmM5x4v3rba00KYGZL8:kd","tlshash":"66a55b5d7754a4b612ef50f7b46b060ab237299ea4402054be99ccec0ef8a417277f3e","size":2231233,"data":"","first_seen":"2025-12-21T07:50:29.941132Z","last_seen":"2026-03-24T02:32:33.774877Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-24","alert":"Hunting_JS_WebAssembly","trigger":"procedimentos.mav.com.br/lib/requirejs.php/1681152964/core/first.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-05T09:47:12.4683Z","times_seen":595964,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/javascript.php/1681152964/blocks/openai_chat/lib.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d26e8238608e9e365af41c17c6aa3fff","sha1":"13c37499bda7e58c6dcaacefdebc78e8f8ff5598","sha256":"c532c21d36079d67a4abf169b30fe663dd27421d30b472b9d50ba982de03638e","sha512":"58086482cd4de7ea715bb5c407fe56a6178bbf358be1fa2e284fb5039366317a2837bc6ba8a8eee5a7c529079dc83337f81de24885b9b6f916b6d9163f70715b","ssdeep":"","tlshash":"aa412338f5108e7d01774bdff2f153dea570b14ab427a0b2b62ccd5867c48812662f65","size":2381,"data":"","first_seen":"2023-10-13T02:20:47Z","last_seen":"2026-03-24T02:32:33.750237Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"dba70bf9335863dea2696ca9da069b01","sha1":"adfc079c12684d419766c7732c35da693517a7f8","sha256":"05f515ab150c8852191afb40be55373b5b5337d89d513e48b802293123361798","sha512":"5021c0726a5460a5a0f0e9de7611e9b059c4129a0d34574ea5826f058fd64752a7f81ecbaecea4625c1e43ccbf36f354e3c20d2b353839f08078461e49b3e508","ssdeep":"","tlshash":"a2a00214245022be044346f154e9e5427c375d6a99121850debd6a9d95516434aa9de0","size":60,"data":"","first_seen":"2023-03-07T01:07:30Z","last_seen":"2026-04-05T06:57:25.258652Z","times_seen":10005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c3430660d89c59c8a8f487727a1c5c2","sha1":"7e9fdee3c92d701b8940dbbc445b65bd2eb7a5d6","sha256":"01ed775c7e5f00d7ae9d701a15133c06de4e58cf257d1ab0d2dd2f75649dda00","sha512":"00c60e6480e1d872e007cd192d04d3d199d6f347d2806357df589ca58fd25c64ba1c4700456e0a1424c1c7b7ce3ab85d8e7beccfd5ea851615cb96f965be7be1","ssdeep":"","tlshash":"8221b1c343ad213e287554d1f79ef8ba0b45f1a777349d98b21d43092f1584a25bc8e1","size":1149,"data":"","first_seen":"2025-12-21T07:50:29.947462Z","last_seen":"2026-03-24T02:32:33.777079Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/requirejs.php/1681152964/core_form/events.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bd9b7011801b347e3e01c9a6362ea4d","sha1":"8d6341b4b0c10383e8029b93ec2dcf6f656069b5","sha256":"e5d7bc2bd57b9baf5d67555077c81ea195a26c161a2cf69eb3b994ce7a150bfd","sha512":"d2c56971fa4eda436bacb3db037a2b1ed5cef7510b27897ee352bba09f6e3fdcd3d27c577ebb7d99f703c8be6fa51d77870d46be52daf3451c3f4333bfce4082","ssdeep":"49152:LdGN3lvidd+nS2OGZO4m0DgQgf6ydZXZ5tbqmM5x4v3rba00KYGZL8:kd","tlshash":"66a55b5d7754a4b612ef50f7b46b060ab237299ea4402054be99ccec0ef8a417277f3e","size":2231233,"data":"","first_seen":"2025-12-21T07:50:29.941132Z","last_seen":"2026-03-24T02:32:33.774877Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-24","alert":"Hunting_JS_WebAssembly","trigger":"procedimentos.mav.com.br/lib/requirejs.php/1681152964/core_form/events.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/javascript.php/1681152964/lib/javascript-static.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e48d7afbba30532379f260739ca39a5","sha1":"0512338a4efebe9b646a882a1fc09055a8a3eb5a","sha256":"111b6329693bb290516569c49cd2f5b578d4310138d7fb36fef8fd4a8288a38d","sha512":"277f6202e693f92ad945f71a2aae7729be13a73b6fe33436fdc091da8f5312ab413784f2f5f942753e9279b81fa729f431b6dd4ceb73c628e60de4a5f41e6839","ssdeep":"384:9SyszfRQ5fRGRQCYwzAA3hiWizs0SfNCx4w+RJHpG1kZLWk66LtrEjOE2Vbb35u9:UystzAA3hsMN66LtojOn5uVB/qed","tlshash":"d7a2e969776138bf06ff24a730db66003035929254858269fe66de885d3c84e7d3bb3e","size":21354,"data":"","first_seen":"2023-03-07T13:02:37Z","last_seen":"2026-04-05T03:16:36.740867Z","times_seen":1546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"4073486048dbfecd0eacf4ba30630ace","sha1":"10a5bfe0355629c8086477050a8fc88d02340e87","sha256":"5195637c1e6b166efc47eb3897814ad28a281ccbf916d10c3eda42c9666ebc67","sha512":"d884d99aceef48975583a7ceb4e8064a0f184153f674ffc72a7a253974792b0f1485777ab566e0f468774b334df495f5f6dc9e373963e03990cde0179e462dba","ssdeep":"","tlshash":"9731789c2ac2e9175e76b14df65b41141623ca07d0960754fa1f2acdcf983cdf6d484b","size":1454,"data":"","first_seen":"2026-03-24T02:32:33.779184Z","last_seen":"2026-03-24T02:32:33.779184Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-05T09:47:12.4683Z","times_seen":595964,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"209ab152a1bbfc96a1a450b31a830d91","sha1":"968f6710bda41c07c913c0156b4016d869755218","sha256":"9944f25929b77ebdee4c64c05b1b148f4bf1992e901546a38637c5578e8ce570","sha512":"bb6bd8707448f07421874320575851c06afdb2ceccc5909257a66be0007a5b2ecb0834db66dbde631faab69e6478bc9a9b9070defd062afe520b571719f0ebd4","ssdeep":"","tlshash":"bb21218b6e4a2e779eccf6c279d26947c58681ec6148898050c4c08821be78d76df9b9","size":1212,"data":"","first_seen":"2023-03-07T13:02:37Z","last_seen":"2026-04-05T03:16:36.7889Z","times_seen":1399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/javascript.php/1681152964/lib/jquery/jquery-3.6.0.min.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"54e404edcb6b8902433c6a8123e018a7","sha1":"fb2f413ac31fd0607b3048426e37d81658cb0ecd","sha256":"37da17e676b0298cd88c1835b00618318df670f9ed4c199274546d4555248dab","sha512":"aadb6b8c61837d45bce3aeda92b91b15fddebb10419f74c6c5ee01ad85605e76087c3fc27c5414882a8ea3b8155db57a07b7f785fbf1675912278c5965b75e74","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vy:DIh8GgP3hujzwbhd3XvSiDQ47GKs","tlshash":"e89309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89499,"data":"","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-04-05T03:16:36.753119Z","times_seen":1025,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/theme/yui_combo.php?3.17.2/event-mousewheel/event-mousewheel-min.js\u00263.17.2/event-resize/event-resize-min.js\u00263.17.2/event-hover/event-hover-min.js\u00263.17.2/event-touch/event-touch-min.js\u00263.17.2/event-move/event-move-min.js\u00263.17.2/event-flick/event-flick-min.js\u00263.17.2/event-valuechange/event-valuechange-min.js\u00263.17.2/event-tap/event-tap-min.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"0151b48e61660bed14bf6acd5bb77210","sha1":"e096360d7d8819dbbf42e7137ed9e37cdd286700","sha256":"26d1a45d173703f01ca9bb8be4335bae6005c3bc0a5f78b380ad18fb152b8835","sha512":"eb88bb6f15cae2bc028c3add06653262339b06971184465d99d77b0e93c71d66ba4a6ecb316a2345b207f4ad8fda082c6a0d15a394265c57817f9fd9a155f170","ssdeep":"384:RJZJJuJsJxqHw6JFwJ8H2qXVJ721TlRXFJ94gsB54nB/fF71oiJIcn:RJ3JuJsJx0J2uH2WJYlVFJ94W/t7fJIa","tlshash":"8162f8cfb648349221e23965525fb10f303ba5c6940a4944f836edc4aa7912e32f7f3c","size":15270,"data":"","first_seen":"2023-03-07T01:07:30Z","last_seen":"2026-04-05T03:16:36.756173Z","times_seen":3947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/javascript.php/1681152964/lib/polyfills/polyfill.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f910e51a8154ac70aff76b6d14628c0","sha1":"9f1a5e85ebd61692d7480c11f652cb29735f6d6d","sha256":"1d6ba14cf4f307b9bbb13d2ad4e4cb5e701add10378e1b785c4c80dba1342170","sha512":"b307d9701d3f91c4948a669a3489bbee39bed97908a8256134192babab73010d7812542ab7e181b034b85adbf9df98850ad14c63338c3b8e375d43a007f760fe","ssdeep":"3072:hmb+eH1CT6e6ZU5ACivjfcBxWy3k4NNCGz4O:hx6ZuAhrE7U4KGzt","tlshash":"ec14a6ccfac1b4ab42d721b4006f100fa176aa55f84a8580f259e5d4bc7ed4fa12bf6d","size":200103,"data":"","first_seen":"2023-04-25T16:13:44Z","last_seen":"2026-04-05T06:57:25.20246Z","times_seen":7381,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8039fd714b58260199b364107c92bff6","sha1":"3776c202a78a99e5eeaafbdc7d8ad61acee3af1d","sha256":"13eaaadfa414f262b7964320054bb2b322b9ef9f3522bc25c9d60dc83b5141cf","sha512":"aead6b5b5c7e878a511508289fdd00497dbd8e828bad40d7ceffd38418c3b3c3a1f5294d9e2ffdd9ec6d1621d91ca8aeef43bee9f4f57f60e8c88ea4df680bdf","ssdeep":"3072:S73hWLCdbytk5W4qees9I8JeB+AGUkTLXZn9T0TICER:SY1a719IaeujJKIDR","tlshash":"765429de73c4743717e760a9202f340ba03ba586640e4548f569e8daad79a0e3173f7d","size":282944,"data":"","first_seen":"2023-03-07T01:07:30Z","last_seen":"2026-04-05T03:16:36.755395Z","times_seen":4060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca9fed9c78589374cbf1a159283980be","sha1":"fd5c45eb5a8134aafd0fa23d5caaf5d094659774","sha256":"8a95021bc9bd5ed63e0c3442ef898fa832e556100545c2134a8af633d52e8569","sha512":"0dee34cae6e229c7c46b47aba416ff488f6a55b3e0948f27eb6c43142b858300148c305cfed840943fc7325e801f03e7389a92c3076a6054966495cc0fe3ddc1","ssdeep":"","tlshash":"41f0c00974cb6d1b21b059a9f85358540c5a124123b16a317a9f118dc37f64dabde8dd","size":535,"data":"","first_seen":"2026-03-24T02:32:33.785199Z","last_seen":"2026-03-24T02:32:33.785199Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"procedimentos.mav.com.br/theme/moove/pix/store_apple.svg","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:02.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /theme/moove/pix/store_apple.svg HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 10 Apr 2023 18:53:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64345b31-2464\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9316,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4b9e6dcb9430b7a98049295705ef70a","sha1":"8619c9fe416769c84331f9d3f7834fa86cab2ce2","sha256":"9d89c65bea50ca437f2e5a9d60fdcaef9acc276372c75a857320348fc685d9b2","sha512":"81d3fecc04085aae46576b9f6d8a47cc8b16fae2c4fe381b0ad474c9132fb4e85ff1bba34131907a00548eb988e7147e0be667594761de56d8efe7834be97e12","ssdeep":"192:YZRY87XJd0gfi+Q9H4agW3MiO9cbiytJItJgvFu:OR9Z1PCH4Mcwc","tlshash":"521284ce037092888d9dcd9f9f3af9e4711fa0ade1a388c195df87489057c59ba48c94","first_seen":"2023-05-23T22:46:22Z","last_seen":"2026-04-02T10:52:22.863404Z","times_seen":180,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:03.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:15 GMT","end":"Mon, 18 May 2026 18:21:14 GMT"},"fingerprint":{"sha1":"B5:88:52:35:18:CA:4C:5C:D9:FD:F5:56:AC:C0:2B:59:E5:7B:5E:F1","sha256":"74:A3:48:9C:ED:BC:84:9B:F3:4E:EF:E2:A0:CD:6B:BA:0F:CC:E2:3A:7A:AD:F3:94:2C:CB:EE:5D:F8:D7:CA:AA"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://procedimentos.mav.com.br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:10 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 145554\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-05T09:49:32.994718Z","times_seen":63833,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":149,"dns":1,"connect":28,"send":0,"wait":29,"receive":36,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/theme/yui_combo.php?3.17.2/event-mousewheel/event-mousewheel-min.js\u00263.17.2/event-resize/event-resize-min.js\u00263.17.2/event-hover/event-hover-min.js\u00263.17.2/event-touch/event-touch-min.js\u00263.17.2/event-move/event-move-min.js\u00263.17.2/event-flick/event-flick-min.js\u00263.17.2/event-valuechange/event-valuechange-min.js\u00263.17.2/event-tap/event-tap-min.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:06.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /theme/yui_combo.php?3.17.2/event-mousewheel/event-mousewheel-min.js\u00263.17.2/event-resize/event-resize-min.js\u00263.17.2/event-hover/event-hover-min.js\u00263.17.2/event-touch/event-touch-min.js\u00263.17.2/event-move/event-move-min.js\u00263.17.2/event-flick/event-flick-min.js\u00263.17.2/event-valuechange/event-valuechange-min.js\u00263.17.2/event-tap/event-tap-min.js HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:06 GMT\r\ncontent-type: application/javascript\r\ncontent-disposition: inline; filename=\"combo\"\r\nexpires: Fri, 19 Mar 2027 02:32:06 GMT\r\npragma: \r\ncache-control: public, max-age=31104000, immutable\r\naccept-ranges: none\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 11 Mar 2023 05:10:44 GMT\r\netag: \"b24ca831785ba367093f089618e840be511be85d\"\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":15270,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3857)","md5":"0151b48e61660bed14bf6acd5bb77210","sha1":"e096360d7d8819dbbf42e7137ed9e37cdd286700","sha256":"26d1a45d173703f01ca9bb8be4335bae6005c3bc0a5f78b380ad18fb152b8835","sha512":"eb88bb6f15cae2bc028c3add06653262339b06971184465d99d77b0e93c71d66ba4a6ecb316a2345b207f4ad8fda082c6a0d15a394265c57817f9fd9a155f170","ssdeep":"384:RJZJJuJsJxqHw6JFwJ8H2qXVJ721TlRXFJ94gsB54nB/fF71oiJIcn:RJ3JuJsJx0J2uH2WJYlVFJ94W/t7fJIa","tlshash":"8162f8cfb648349221e23965525fb10f303ba5c6940a4944f836edc4aa7912e32f7f3c","first_seen":"2023-03-07T01:07:30Z","last_seen":"2026-04-05T03:16:36.756173Z","times_seen":3947,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/ajax/service-nologin.php?info=8-method-calls\u0026cachekey=1681152964","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:07.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"POST /lib/ajax/service-nologin.php?info=8-method-calls\u0026cachekey=1681152964 HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 1287\r\nOrigin: https://procedimentos.mav.com.br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1287,"data":"[{\"index\":0,\"methodname\":\"core_output_load_template_with_dependencies\",\"args\":{\"component\":\"core\",\"template\":\"loading\",\"themename\":\"moove\",\"lang\":\"en\"}},{\"index\":1,\"methodname\":\"core_output_load_template_with_dependencies\",\"args\":{\"component\":\"core\",\"template\":\"modal\",\"themename\":\"moove\",\"lang\":\"en\"}},{\"index\":2,\"methodname\":\"core_output_load_template_with_dependencies\",\"args\":{\"component\":\"core\",\"template\":\"modal_backdrop\",\"themename\":\"moove\",\"lang\":\"en\"}},{\"index\":3,\"methodname\":\"core_output_load_template_with_dependencies\",\"args\":{\"component\":\"core\",\"template\":\"modal_save_cancel\",\"themename\":\"moove\",\"lang\":\"en\"}},{\"index\":4,\"methodname\":\"core_output_load_template_with_dependencies\",\"args\":{\"component\":\"core\",\"template\":\"modal_cancel\",\"themename\":\"moove\",\"lang\":\"en\"}},{\"index\":5,\"methodname\":\"core_output_load_template_with_dependencies\",\"args\":{\"component\":\"core\",\"template\":\"local/modal/alert\",\"themename\":\"moove\",\"lang\":\"en\"}},{\"index\":6,\"methodname\":\"core_output_load_template_with_dependencies\",\"args\":{\"component\":\"theme_moove\",\"template\":\"accessibilitysettings_modal\",\"themename\":\"moove\",\"lang\":\"en\"}},{\"index\":7,\"methodname\":\"core_output_load_template_with_dependencies\",\"args\":{\"component\":\"core\",\"template\":\"pix_icon_fontawesome\",\"themename\":\"moove\",\"lang\":\"en\"}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Mon, 22 Jun 2026 02:32:07 GMT\r\npragma: \r\ncache-control: public, max-age=7776000, immutable\r\nx-powered-by: PHP/8.0.30, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":10980,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"654998cb3ea6d09df70787be1c69a93e","sha1":"bf5b9667f23bea10429ed5b1f19dfef673f4aaed","sha256":"440a818889e49f328cd9d7f6fc7fee80b41cc494d75930cea5a051ed64f409c0","sha512":"a60aaf93d292d3252a9fa6373631eb22ad7b3941c76519424be7cb7d3b7bebd8eb1b66e649dddf316a6bc78e60c03dc1d4c9787eba91a96a91f586f086ce973f","ssdeep":"96:JuYsYQpOEeGa1HhQpOEeGMYhQpOEeG3BhQpOEeGnQpexKs7GhonR2n9G5:gjYzhghCBhIVgC15","tlshash":"71320024789c4a730aa784df666b1e3c3ef8f084cce5289273ad4a5c03f3564d3a61a5","first_seen":"2023-06-05T10:05:29Z","last_seen":"2026-03-26T05:25:21.132435Z","times_seen":52,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/javascript.php/1681152964/lib/polyfills/polyfill.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:02.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /lib/javascript.php/1681152964/lib/polyfills/polyfill.js HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=\"javascript.php\"\r\nexpires: Mon, 22 Jun 2026 02:32:02 GMT\r\npragma: \r\ncache-control: public, max-age=7776000, immutable\r\naccept-ranges: none\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: \"5ab454a820d285cb663632421363dd6d563ab078\"\r\nlast-modified: Mon, 10 Apr 2023 18:56:13 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":200103,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36874)","md5":"2f910e51a8154ac70aff76b6d14628c0","sha1":"9f1a5e85ebd61692d7480c11f652cb29735f6d6d","sha256":"1d6ba14cf4f307b9bbb13d2ad4e4cb5e701add10378e1b785c4c80dba1342170","sha512":"b307d9701d3f91c4948a669a3489bbee39bed97908a8256134192babab73010d7812542ab7e181b034b85adbf9df98850ad14c63338c3b8e375d43a007f760fe","ssdeep":"3072:hmb+eH1CT6e6ZU5ACivjfcBxWy3k4NNCGz4O:hx6ZuAhrE7U4KGzt","tlshash":"ec14a6ccfac1b4ab42d721b4006f100fa176aa55f84a8580f259e5d4bc7ed4fa12bf6d","first_seen":"2023-04-25T16:13:44Z","last_seen":"2026-04-05T06:57:25.20246Z","times_seen":7381,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/theme/moove/pix/default_slide.jpg","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:02.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /theme/moove/pix/default_slide.jpg HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 88180\r\nlast-modified: Mon, 10 Apr 2023 18:53:37 GMT\r\netag: \"64345b31-15874\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88180,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 1160x516, components 3","md5":"3209c4edd002608c341e5fbb2065e8c5","sha1":"2d403fd74e6b454e304df11967b73cefd6b8fd0e","sha256":"b0056fc252af48f4124cf95ed8069d69ba3c7d1897af1228743ef4c778fff420","sha512":"33c230b4bfca01a6426cfb275a1f0d66f312e3f14975b086d9f7f34d869c510f7764efb78d27e8a721bf003e0fc858dd73a8d4c50d69d874043d9f04790ae660","ssdeep":"1536:ZDkrP0nB9J+WW1HmKW91CIsTBc86NkhkKqIGxyI3tvj8UE5gGcxAPxGy:lkrMB9LW1HmKW91XjihkKqnxvxSUAPAy","tlshash":"e88302e5928dfa387de369b61d3c26140b27b6fc0a5c207af6c4401ba1e9947107bf76","first_seen":"2025-08-03T23:08:13.623421Z","last_seen":"2026-03-24T02:32:33.748928Z","times_seen":4,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/javascript.php/1681152964/blocks/openai_chat/lib.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:02.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /lib/javascript.php/1681152964/blocks/openai_chat/lib.js HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=\"javascript.php\"\r\nexpires: Mon, 22 Jun 2026 02:32:03 GMT\r\npragma: \r\ncache-control: public, max-age=7776000, immutable\r\naccept-ranges: none\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: \"91fda381f2cd3be53f8b02dfbbb7a4d45a6c6b15\"\r\nlast-modified: Mon, 10 Apr 2023 19:08:19 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2381,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (342)","md5":"d26e8238608e9e365af41c17c6aa3fff","sha1":"13c37499bda7e58c6dcaacefdebc78e8f8ff5598","sha256":"c532c21d36079d67a4abf169b30fe663dd27421d30b472b9d50ba982de03638e","sha512":"58086482cd4de7ea715bb5c407fe56a6178bbf358be1fa2e284fb5039366317a2837bc6ba8a8eee5a7c529079dc83337f81de24885b9b6f916b6d9163f70715b","ssdeep":"","tlshash":"aa412338f5108e7d01774bdff2f153dea570b14ab427a0b2b62ccd5867c48812662f65","first_seen":"2023-10-13T02:20:47Z","last_seen":"2026-03-24T02:32:33.750237Z","times_seen":6,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/theme/moove/pix/store_google.svg","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:02.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /theme/moove/pix/store_google.svg HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 10 Apr 2023 18:53:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64345b31-1f8a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8074,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"addbff3d5b71636dca110e2732cd76e4","sha1":"8c577f5a6bcfb3ed58d29942fc5861aa52780c22","sha256":"797755446731839dd4fd40bc8b1a18a41b6f28b833c0f4070f0cb3f0d1a48a0b","sha512":"885a3c6f623affa1e6b9d3771e64103fb08dcaea5dc0974770da560b89c5958e7876cedf8a0d6ab439a6a18821e9a71e22b1b6e04167d7c7a8cf590adeb87e67","ssdeep":"192:JYwEBWnTJpq9SXxskYSwnR6KtbiKBMW+ZAlEsylCjx/N:JyWnTJp5OkSnRpNiKX+6Gsywjx1","tlshash":"11f1a7d21370b2d49ecbceadef3eed582609b0fb996a04849597d708458b9e9f40cc64","first_seen":"2023-05-23T22:46:22Z","last_seen":"2026-04-02T10:52:22.862571Z","times_seen":175,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/theme/moove/pix/logo_conectime.svg","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:02.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /theme/moove/pix/logo_conectime.svg HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 10 Apr 2023 18:53:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64345b31-2973\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10611,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c26cff872d1b74df8e1b734ca6fee7e","sha1":"735a0be10a159a00c038a83400f57be1e71f3bb1","sha256":"4a900169321f97667bb7cf7c4e19e149e71320221a007edb6aedb3f88790f04e","sha512":"5c355699d5e45b785c6fea136afd3e685181dac785818cf9d43c933f055fe3b782ff53cb94046aa2703c423b526a932104e3509468fc345ec78f47f97229d20d","ssdeep":"192:sC+omYM1XoIZ4EubgLb3BkdC+omYZefcr3TLhwfiLuQoD+AL9q2L9MbGy0:sDo/E3LLaYe0r3TLuiLVaLVLv","tlshash":"1122a4f63b3196893243cb71de12a8e2625f34fe6dcab1dc42a6b749d0d3167de44508","first_seen":"2023-05-23T22:46:22Z","last_seen":"2026-03-31T19:05:50.050435Z","times_seen":236,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/pluginfile.php/2694/course/overviewfiles/cloud-g92784d3c8_1920.jpg","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:04.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /pluginfile.php/2694/course/overviewfiles/cloud-g92784d3c8_1920.jpg HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-disposition: inline; filename=\"cloud-g92784d3c8_1920.jpg\"\r\ncache-control: public, max-age=3600, no-transform\r\nexpires: Tue, 24 Mar 2026 03:32:05 GMT\r\npragma: \r\naccept-ranges: bytes\r\netag: \"558ec42a96f29947c26ad880286a6a6f138a3020\"\r\nlast-modified: Tue, 07 Dec 2021 15:31:55 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":314532,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 1920x824, components 3","md5":"d81dcca3102f818b60b4cf67df8f6779","sha1":"558ec42a96f29947c26ad880286a6a6f138a3020","sha256":"a298e3c2af2d23b04da95ed84a4377535fc5fa4a7a7149acd9eab66c14aa7a72","sha512":"882520a64c8d237df71bb111af6a9ae3e59a4f359c9d8b9817631e620d24ae544694a97c42f6a756efce2b8fa22432603684c6dd7129c7f8f8710e7a24b939e0","ssdeep":"6144:tbj9Hccc4fsXmGDqCMHz3RQF/bdDaFR/AkZr21/IXCn0zb9Axvi3M:5j5o4Ez2CMHjKRdDaFRVBzCn0/+qc","tlshash":"466412cc9c57fdd9d626243a620eeb128c81fd1913976ab88e8400cbfa47341df57a27","first_seen":"2025-12-21T07:50:29.931001Z","last_seen":"2026-03-24T02:32:33.752299Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/javascript.php/1681152964/lib/jquery/jquery-3.6.0.min.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:06.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /lib/javascript.php/1681152964/lib/jquery/jquery-3.6.0.min.js HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=\"javascript.php\"\r\nexpires: Mon, 22 Jun 2026 02:32:06 GMT\r\npragma: \r\ncache-control: public, max-age=7776000, immutable\r\naccept-ranges: none\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: \"d3fc2d0f7b25428af4c02543efdf5779bee3fbd5\"\r\nlast-modified: Mon, 10 Apr 2023 18:56:09 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89499,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"54e404edcb6b8902433c6a8123e018a7","sha1":"fb2f413ac31fd0607b3048426e37d81658cb0ecd","sha256":"37da17e676b0298cd88c1835b00618318df670f9ed4c199274546d4555248dab","sha512":"aadb6b8c61837d45bce3aeda92b91b15fddebb10419f74c6c5ee01ad85605e76087c3fc27c5414882a8ea3b8155db57a07b7f785fbf1675912278c5965b75e74","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vy:DIh8GgP3hujzwbhd3XvSiDQ47GKs","tlshash":"e89309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T12:04:17Z","last_seen":"2026-04-05T03:16:36.753119Z","times_seen":1025,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/ajax/service-nologin.php?info=6-method-calls\u0026cachekey=1681152964\u0026args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22cancel%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A1%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22closebuttontitle%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A2%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22loading%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A3%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22savechanges%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A4%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showless%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A5%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showmore%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%5D","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:07.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /lib/ajax/service-nologin.php?info=6-method-calls\u0026cachekey=1681152964\u0026args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22cancel%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A1%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22closebuttontitle%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A2%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22loading%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A3%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22savechanges%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A4%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showless%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A5%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showmore%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%5D HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Mon, 22 Jun 2026 02:32:07 GMT\r\npragma: \r\ncache-control: public, max-age=7776000, immutable\r\nx-powered-by: PHP/8.0.30, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":211,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c135ebb8306e47146c197265b9c9022b","sha1":"425c439b399cc4a29df884f4ac5aa75505944c2c","sha256":"afefe583c5a695189962783424716b19758b2a08e71480cb91a73c88c98a20be","sha512":"835ebc5cb8efd69cb7a6e26e6d236e0e7f08a7a7321e59a5ff6d47f44e700ac75ee2da2982717201a19fd1f98b30e4f3a2c68fc182ab9c0cac0754fd062f266b","ssdeep":"","tlshash":"80d0ea993996047f9d4338d0ec4354113ae53390a4786c58de94b915b0d34abbd3683b","first_seen":"2023-04-08T14:17:27Z","last_seen":"2026-04-05T06:57:25.221645Z","times_seen":6526,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":671,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T02:32:00.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 15109\r\ncontent-language: en\r\ncontent-script-type: text/javascript\r\ncontent-style-type: text/css\r\nx-ua-compatible: IE=edge\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-transform\r\npragma: no-cache\r\nexpires: Mon, 20 Aug 1969 09:23:00 GMT\r\naccept-ranges: none\r\nx-frame-options: sameorigin\r\nset-cookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8; path=/; secure\r\nlast-modified: Tue, 24 Mar 2026 02:32:02 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Moodle","description":"Moodle is a free and open-source Learning Management System (LMS) written in PHP and distributed under the GNU General Public License.","website":"https://moodle.org","common_platform_enumeration":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","icon":"Moodle.png","categories":["LMS"]}],"data":{"size":148621,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13056), with CRLF, LF line terminators","md5":"5ce32ba941b9ef575a6dd32c09caee1b","sha1":"bd9b1533eb6f2e6cc0d767e8f8dec2030998fb08","sha256":"9ea5d5e50704717f0c5ceb79c4833a3cfe0b08d71146949b68be952753e42f54","sha512":"e12a400e5d2c8b7020644280122cbcb3d5b589c4ea0918b7be3f696ecfdb12ce3ba6f0d0440fb2b5e4fc1545b3b9a87563f79e218a6524111970ea160d83d5fa","ssdeep":"3072:Bqvw+ea9fRh7uEBJLpUNXpzKEDvC7pXWrv8NVZmTZ4:Bqz3","tlshash":"4de387a3a3e315b7010fb5c0a9982e1cbc51e283dd519461b7bd03b46f71deea9432b6","first_seen":"2026-03-24T02:32:33.755081Z","last_seen":"2026-03-24T02:32:33.755081Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2948,"timings":{"blocked":739,"dns":332,"connect":199,"send":0,"wait":1270,"receive":199,"ssl":205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/javascript.php/1681152964/lib/requirejs/require.min.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:02.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /lib/javascript.php/1681152964/lib/requirejs/require.min.js HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=\"javascript.php\"\r\nexpires: Mon, 22 Jun 2026 02:32:03 GMT\r\npragma: \r\ncache-control: public, max-age=7776000, immutable\r\naccept-ranges: none\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: \"45a1caf9ee0284cddaa23a917c92be8dac39f42b\"\r\nlast-modified: Mon, 10 Apr 2023 18:56:06 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17737,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17535)","md5":"1f53ac504f7e69a6df96140eed2d4df2","sha1":"da00136dd3fd0ccab626d7555ccb5fdf1c096fad","sha256":"9ce0dbd6a1df9332653e27d1ddc505c5b78fd82b4112de0ec63840c3fbe0b8c2","sha512":"84eee089ccb30386ada288f6df29a24bfe7297f2533354cdfae0814c90fa25c628e5c487e0220bf20870975b844c473f82ab59648033978079f3a31382a58df0","ssdeep":"384:bv0q1f+PooH82TV0kGznHnEDb0Cvy1Vm7g885cT8r55ken+5tMq8Qatwebl4:7fAooH8x3LHnEDRvy1I7RXT8r3/nYMqp","tlshash":"3382d9ee3ae6f913a26222f4406f504e537bd993140dc154f619e8f5acb8164a6b3e3c","first_seen":"2023-03-07T01:07:30Z","last_seen":"2026-04-05T04:58:49.968686Z","times_seen":5329,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/pluginfile.php/2678/course/overviewfiles/im_curso.png","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:04.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /pluginfile.php/2678/course/overviewfiles/im_curso.png HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:05 GMT\r\ncontent-type: image/png\r\ncontent-disposition: inline; filename=\"im_curso.png\"\r\ncache-control: public, max-age=3600, no-transform\r\nexpires: Tue, 24 Mar 2026 03:32:05 GMT\r\npragma: \r\naccept-ranges: bytes\r\netag: \"15465af973eb5109fd820ddc2d6c1059e5d11065\"\r\nlast-modified: Tue, 07 Dec 2021 13:41:40 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 728 x 91, 8-bit/color RGBA, non-interlaced","md5":"35dc66282b35ab8abf2d8140c389b875","sha1":"15465af973eb5109fd820ddc2d6c1059e5d11065","sha256":"d3116e86cbf3e66b3d67d0016fa7bd1991f67f6ce099d358373fb84b584dc0a1","sha512":"1a1892e2007d28ee7bb06faa03d1dcf2aca5b1c04ed130c4d0fd5b227d03f0dbff0bb7a97246f95b4c751ea745526f48892b0d90b45f6d99603385c1f2ec66d2","ssdeep":"384:9u8TcvdYHezS+FpN12dliJXpDcIgJ+1LKqK:pTiEezbEduwI+sK","tlshash":"ba42489f23d8ddc3d04dff3302acda7929b21be8458c5f6617b9bc9d2e026840b0a541","first_seen":"2025-12-21T07:50:29.920272Z","last_seen":"2026-03-24T02:32:33.756781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1706,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1706,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/pluginfile.php/2744/course/overviewfiles/email-gf99783445_1280.png","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:04.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /pluginfile.php/2744/course/overviewfiles/email-gf99783445_1280.png HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:05 GMT\r\ncontent-type: image/png\r\ncontent-disposition: inline; filename=\"email-gf99783445_1280.png\"\r\ncache-control: public, max-age=3600, no-transform\r\nexpires: Tue, 24 Mar 2026 03:32:05 GMT\r\npragma: \r\naccept-ranges: bytes\r\netag: \"ea334604392b3d8c75d66f551467868e6168709f\"\r\nlast-modified: Fri, 11 Feb 2022 19:26:09 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111635,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 865, 8-bit/color RGB, non-interlaced","md5":"a783f4f9b9074df06a8ca4ba9f9e72b6","sha1":"ea334604392b3d8c75d66f551467868e6168709f","sha256":"493a8f75a6b439d06c9bd1fdc4700b4f75f927a744249c00131dc16945f89241","sha512":"34fca6edf743123373e76bed43b429d9480421b164a88c693b2a1bfb0503d9c58a18054937de43157eb5a928258da5d26ca8aee4f4a119ed2b36ffa36d81e9a2","ssdeep":"3072:S84P40jvrbzn0+BIOiptEnvVrZRY29UYc3rvDK9DumHEWD:vV0jXr0AHytgBnV9I+DpzD","tlshash":"a9b3122fb679dac5d753007188db2bffa70031d44a013fb4cd29b9afe4ea52a8455718","first_seen":"2024-08-20T14:51:26.120599Z","last_seen":"2026-03-24T02:32:33.75793Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/pluginfile.php/5/user/icon/moove/f1?rev=7683","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:02.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /pluginfile.php/5/user/icon/moove/f1?rev=7683 HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-disposition: inline; filename=\"f1.jpg\"\r\ncache-control: public, max-age=31536000, no-transform\r\nexpires: Wed, 24 Mar 2027 02:32:03 GMT\r\npragma: \r\naccept-ranges: bytes\r\netag: \"7be3b0a415ddc6c0c6170accc02aa50db42f25c7\"\r\nlast-modified: Thu, 09 Dec 2021 12:34:45 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6412,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 100x100, components 3","md5":"a86ec18ab11eef780be03684e9863fd4","sha1":"7be3b0a415ddc6c0c6170accc02aa50db42f25c7","sha256":"481ce3c64600d0fa376529086e6a401f7c9d5a8f3f4d276995aa37bbcebbcaf9","sha512":"fb6406ddec87d6bcf70f70e0dc808c7504c37d063f84325df2d8f2a63d891de3444b663d35a2e914acb5f56cd54aae6e3cbc7b3a55fa4c3eb6815394d34c539b","ssdeep":"192:+Rq2K6gPQFeUO8RjlX4OWwKY9T+jOzfSWM:+k2A0VjlIO9d+DWM","tlshash":"2bd19e2069010ce6fda6693b25ed3e7143cf45993d5530471efde405cd92f8274a09be","first_seen":"2025-12-21T07:50:29.932657Z","last_seen":"2026-03-24T02:32:33.759042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":987,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":987,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/pluginfile.php/40/course/overviewfiles/im_curso.png","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:04.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /pluginfile.php/40/course/overviewfiles/im_curso.png HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:05 GMT\r\ncontent-type: image/png\r\ncontent-disposition: inline; filename=\"im_curso.png\"\r\ncache-control: public, max-age=3600, no-transform\r\nexpires: Tue, 24 Mar 2026 03:32:05 GMT\r\npragma: \r\naccept-ranges: bytes\r\netag: \"15465af973eb5109fd820ddc2d6c1059e5d11065\"\r\nlast-modified: Tue, 07 Dec 2021 13:40:40 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 728 x 91, 8-bit/color RGBA, non-interlaced","md5":"35dc66282b35ab8abf2d8140c389b875","sha1":"15465af973eb5109fd820ddc2d6c1059e5d11065","sha256":"d3116e86cbf3e66b3d67d0016fa7bd1991f67f6ce099d358373fb84b584dc0a1","sha512":"1a1892e2007d28ee7bb06faa03d1dcf2aca5b1c04ed130c4d0fd5b227d03f0dbff0bb7a97246f95b4c751ea745526f48892b0d90b45f6d99603385c1f2ec66d2","ssdeep":"384:9u8TcvdYHezS+FpN12dliJXpDcIgJ+1LKqK:pTiEezbEduwI+sK","tlshash":"ba42489f23d8ddc3d04dff3302acda7929b21be8458c5f6617b9bc9d2e026840b0a541","first_seen":"2025-12-21T07:50:29.920272Z","last_seen":"2026-03-24T02:32:33.756781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/theme/styles.php/moove/1716218344_1/all","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:02.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /theme/styles.php/moove/1716218344_1/all HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:03 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-disposition: inline; filename=\"styles.php\"\r\nexpires: Mon, 22 Jun 2026 02:32:02 GMT\r\npragma: \r\ncache-control: public, max-age=7776000, immutable\r\naccept-ranges: none\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: \"5c5c1d02085cc9f6ff0a550b5b3b6b87ab86e7f5\"\r\nlast-modified: Mon, 20 May 2024 15:19:07 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":722572,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"1d3700869f5e945d77cf744f69419db9","sha1":"6eaf145acb8532a1be87a925f3aafdb1bb844e8e","sha256":"3ec59fc8fb3755670aec2091a33b07e5744301351301612041850a27e1b675d9","sha512":"1643191f4793c513c01a60389f519758a67ad948f4d2b629328437669f0097779c5d38bf2ea999610068141594a06c201fb915f77343f2742c011974c768dff8","ssdeep":"6144:HyYjom4NJ6wwBoAiF8rVD3BW6kqbte/Bmux88kMENM6HN26Og5+bFMdV:HBe6kqMg5p","tlshash":"54e41a76f5a821697237c65ff4d0b7a8223ae160f2521efaf413a71c4eca5d61123b1c","first_seen":"2025-12-21T07:50:29.902182Z","last_seen":"2026-03-24T02:32:33.760138Z","times_seen":2,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/pluginfile.php/2699/course/overviewfiles/to-do-g5f33d9deb_640.jpg","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:04.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /pluginfile.php/2699/course/overviewfiles/to-do-g5f33d9deb_640.jpg HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-disposition: inline; filename=\"to-do-g5f33d9deb_640.jpg\"\r\ncache-control: public, max-age=3600, no-transform\r\nexpires: Tue, 24 Mar 2026 03:32:05 GMT\r\npragma: \r\naccept-ranges: bytes\r\netag: \"8dab05da90a19a77f01c66d3bc765d1ddb3fcc3c\"\r\nlast-modified: Tue, 07 Dec 2021 15:38:38 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19983,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x405, components 3","md5":"bc7b6fb94a2af7f1de07d209fe19d12d","sha1":"8dab05da90a19a77f01c66d3bc765d1ddb3fcc3c","sha256":"f9d74c4567e4d84a5936cfb54dbede3265997c6379e0d699cb470ef756de1a6d","sha512":"d978d82e57fdf35fa5f9907c1ed944c914bbc29fe31bcc0c09dff4bd1854a3180e4e03152916e4ebfc7de397fcd494e2895c4df561a1d4ea23f6339f36500397","ssdeep":"384:5iVPnRTJ3P7cvkuB5XTAw1s+QEcjHsykKH44JPyQGTbG:QD7Oko1sdwx4/GvG","tlshash":"5992c0a4bf4024a3d41c57b32637566e93212cd63ce998be2d405dbc63b6ee476ac098","first_seen":"2026-03-24T02:32:33.761449Z","last_seen":"2026-03-24T02:32:33.761449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1685,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1685,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:04.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:15 GMT","end":"Mon, 18 May 2026 18:21:14 GMT"},"fingerprint":{"sha1":"B5:88:52:35:18:CA:4C:5C:D9:FD:F5:56:AC:C0:2B:59:E5:7B:5E:F1","sha256":"74:A3:48:9C:ED:BC:84:9B:F3:4E:EF:E2:A0:CD:6B:BA:0F:CC:E2:3A:7A:AD:F3:94:2C:CB:EE:5D:F8:D7:CA:AA"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://procedimentos.mav.com.br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:10 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 145554\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-05T09:49:32.994718Z","times_seen":63833,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:02.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:02 GMT\r\ncontent-type: text/css;charset=UTF-8\r\ncontent-disposition: inline; filename=\"combo\"\r\nexpires: Fri, 19 Mar 2027 02:32:02 GMT\r\npragma: \r\ncache-control: public, max-age=31104000, immutable\r\naccept-ranges: none\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 11 Mar 2023 05:10:44 GMT\r\netag: \"b9bc567c469e2872cf3bbb14603342a72de2509b\"\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3627,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1965)","md5":"73cbdae81548a6d6b35d801af5eadef8","sha1":"fc80239620ebad54e36e1865338e8c5e1a7e9e8b","sha256":"fbd5b8255a99afe96e89a88423275ed4e93083fad3311dd349906122e63206a0","sha512":"5a18bee89a788f9a7fcec12d51d973ac6cb04a532e8d63521bbaae4ba2745602d0589295bebecdef60610e9324673953fb9c9a7553f5a53a0876fe2c029ff7be","ssdeep":"","tlshash":"4c711e7199400365f3dfca4d6922e38ea047e0fad4e35cdea9b0b61c429f1ce6532e65","first_seen":"2023-04-08T14:17:26Z","last_seen":"2026-04-05T03:16:36.748928Z","times_seen":3532,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/pluginfile.php/1/theme_moove/logo/1716218344/Logo_Meile_.png","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:02.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /pluginfile.php/1/theme_moove/logo/1716218344/Logo_Meile_.png HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:03 GMT\r\ncontent-type: image/png\r\ncontent-disposition: inline; filename=\"Logo_Meile_.png\"\r\ncache-control: public, max-age=5184000, no-transform\r\nexpires: Sat, 23 May 2026 02:32:03 GMT\r\npragma: \r\naccept-ranges: bytes\r\netag: \"91a7940f52be67bcab66ca686d1ab14c7a34cec3\"\r\nlast-modified: Mon, 20 May 2024 15:25:27 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":14874,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"61ae613f954f787c3854c46ae20690bf","sha1":"91a7940f52be67bcab66ca686d1ab14c7a34cec3","sha256":"ad3ae6354d91af08773da61aa7f48f36de3d1096905470946cfb775c91599b63","sha512":"391d9e64294843a54cf1fe04ffd74c550ebe95002179c389251d00cef3cc9fc36857bcefa3031c854cf1c250d6a92583de80c490126547d5922505e82e40d7a4","ssdeep":"192:l+U1hRExVMcTjPyK7wXAKAh5Bkp5D/FtXWQuDyPtz/53kO+eyUaHOObftYXs2qye:f10ccT37dvh5q8D8Q5lru6tYXxF6eNCN","tlshash":"2e62c0cb7f3aafc9eb9434598e8b96193a2644511be4732d2204feb4b78bc0c70052d4","first_seen":"2025-12-21T07:50:29.891932Z","last_seen":"2026-03-24T02:32:33.763214Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1020,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/pluginfile.php/1/theme_moove/favicon/1716218344/ms-icon-152x152.ico","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:06.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /pluginfile.php/1/theme_moove/favicon/1716218344/ms-icon-152x152.ico HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:06 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-disposition: inline; filename=\"ms-icon-152x152.ico\"\r\ncache-control: public, max-age=5184000, no-transform\r\nexpires: Sat, 23 May 2026 02:32:06 GMT\r\npragma: \r\naccept-ranges: bytes\r\netag: \"071111b3b8d95ab165f0a1ccfdb41dfc158daa1c\"\r\nlast-modified: Fri, 05 Apr 2024 11:50:05 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":95518,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, -104x-104, 32 bits/pixel","md5":"71235fc14633541727966a110630ae6f","sha1":"071111b3b8d95ab165f0a1ccfdb41dfc158daa1c","sha256":"875f069565b039489e4271018d82da09ec47b107f191ca6ee06d3c46236f0551","sha512":"a4a602fd2f4d70c119defef4a038d602f61d75652411302279c9208c8cee3a1b2a777036ca9af0b75443d02b5fc87839295125adba2874c4e080b00871a88b39","ssdeep":"192:ChdMO668BI7IHfsaxpPvnGEZVXvHzb0AdJ31b9:Chdn69IMUCNGEZtzHD1b9","tlshash":"9a93a6751194f88ae8de59738c4dec183ccfb8db6913d2923891523351f2e436e83976","first_seen":"2025-12-21T07:50:29.894201Z","last_seen":"2026-03-24T02:32:33.76425Z","times_seen":2,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/ajax/service.php?sesskey=z3iBdLHy0o\u0026info=media_videojs_get_language","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:06.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"POST /lib/ajax/service.php?sesskey=z3iBdLHy0o\u0026info=media_videojs_get_language HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 76\r\nOrigin: https://procedimentos.mav.com.br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":76,"data":"[{\"index\":0,\"methodname\":\"media_videojs_get_language\",\"args\":{\"lang\":\"en\"}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.0.30, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4531,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1d55bc8fb15ace98616b30027310a057","sha1":"1109dee50f7660eb75b2ec7dfc5889434d91351c","sha256":"aaf9075c9b35ee27d05a21e89ec43d1b2013a8151360e59050c8977edd33d5b8","sha512":"db7ca824c5a8eef9372c13e426d047e5c081e8d6bbd5d7f4e4117685bfec712733d7f5030b42ac7ba02dd3f26474308a5df930e2a9580beb8376d3a9dcc5d9bf","ssdeep":"96:MwKIKYZE7t7PsN9kTbTyIAYDj42i8BHcYW84lDcpKlrUlcdRy8:E7PsN9kXOI5jHc7KpRl41","tlshash":"9b91112d9458933d08d39ca56b8e5ef6a1e94f471430a79e2c6ff50f270706dda728c0","first_seen":"2023-04-08T14:17:27Z","last_seen":"2026-04-05T03:16:36.756947Z","times_seen":1776,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:02.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:16 GMT","end":"Mon, 18 May 2026 18:21:15 GMT"},"fingerprint":{"sha1":"2E:3A:15:86:61:59:FB:5F:EB:37:7C:37:42:88:9E:94:DB:D6:5A:29","sha256":"A6:F5:D3:00:89:77:82:3F:87:E8:B2:B4:8F:EF:44:C7:21:C2:36:06:DE:BC:31:37:4F:BC:60:76:4D:05:AB:8A"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 24 Mar 2026 02:32:02 GMT\r\ndate: Tue, 24 Mar 2026 02:32:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28105,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0c00677f5aa91e22e6e507d0796ac84e","sha1":"63dc5aabe4b4fd38b7d23f12d8ef724a8c5b6411","sha256":"5666b7d631887b89e5bfa7c57c299e93f92772828c7755bcdbe01c4e44d438e0","sha512":"197d7fbe57a4afcd5e9b637a487bb5aeb43fd72810760db05c2e4b29f019f99c6f20ecce87711c35390aa9c52fdb47e306263626b0441bd4b499d7ca5e767575","ssdeep":"768:zj69tha4L8sEDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVKy8:qUyll3","tlshash":"f9c22ea1041744409b838ce223cebf35fe1f92517141d0b9abfd9b6baddbca6526835c","first_seen":"2026-02-20T05:27:49.545468Z","last_seen":"2026-04-05T03:46:46.307331Z","times_seen":206,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":139,"dns":1,"connect":14,"send":0,"wait":34,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:02.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:03 GMT\r\ncontent-type: application/javascript\r\ncontent-disposition: inline; filename=\"combo\"\r\nexpires: Fri, 19 Mar 2027 02:32:03 GMT\r\npragma: \r\ncache-control: public, max-age=31104000, immutable\r\naccept-ranges: none\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 11 Mar 2023 05:10:44 GMT\r\netag: \"78581a0bac8a932effb32db3e91e0f2f2b47c08e\"\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":282944,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6010)","md5":"8039fd714b58260199b364107c92bff6","sha1":"3776c202a78a99e5eeaafbdc7d8ad61acee3af1d","sha256":"13eaaadfa414f262b7964320054bb2b322b9ef9f3522bc25c9d60dc83b5141cf","sha512":"aead6b5b5c7e878a511508289fdd00497dbd8e828bad40d7ceffd38418c3b3c3a1f5294d9e2ffdd9ec6d1621d91ca8aeef43bee9f4f57f60e8c88ea4df680bdf","ssdeep":"3072:S73hWLCdbytk5W4qees9I8JeB+AGUkTLXZn9T0TICER:SY1a719IaeujJKIDR","tlshash":"765429de73c4743717e760a9202f340ba03ba586640e4548f569e8daad79a0e3173f7d","first_seen":"2023-03-07T01:07:30Z","last_seen":"2026-04-05T03:16:36.755395Z","times_seen":4060,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/javascript.php/1681152964/lib/javascript-static.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:02.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /lib/javascript.php/1681152964/lib/javascript-static.js HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=\"javascript.php\"\r\nexpires: Mon, 22 Jun 2026 02:32:02 GMT\r\npragma: \r\ncache-control: public, max-age=7776000, immutable\r\naccept-ranges: none\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: \"ab6937247a6212d9d7d4ac0eb291787cb2dff9f5\"\r\nlast-modified: Mon, 10 Apr 2023 18:56:13 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21354,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1875)","md5":"3e48d7afbba30532379f260739ca39a5","sha1":"0512338a4efebe9b646a882a1fc09055a8a3eb5a","sha256":"111b6329693bb290516569c49cd2f5b578d4310138d7fb36fef8fd4a8288a38d","sha512":"277f6202e693f92ad945f71a2aae7729be13a73b6fe33436fdc091da8f5312ab413784f2f5f942753e9279b81fa729f431b6dd4ceb73c628e60de4a5f41e6839","ssdeep":"384:9SyszfRQ5fRGRQCYwzAA3hiWizs0SfNCx4w+RJHpG1kZLWk66LtrEjOE2Vbb35u9:UystzAA3hsMN66LtojOn5uVB/qed","tlshash":"d7a2e969776138bf06ff24a730db66003035929254858269fe66de885d3c84e7d3bb3e","first_seen":"2023-03-07T13:02:37Z","last_seen":"2026-04-05T03:16:36.740867Z","times_seen":1546,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/theme/image.php/moove/core/1716218344/u/f1","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:02.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /theme/image.php/moove/core/1716218344/u/f1 HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:02 GMT\r\ncontent-type: image/png\r\ncontent-disposition: inline; filename=\"f1.png\"\r\nexpires: Mon, 22 Jun 2026 02:32:02 GMT\r\npragma: \r\ncache-control: public, max-age=7776000, no-transform, immutable\r\naccept-ranges: none\r\netag: \"383a6d9c7f6aa38a07c39e9309ea7228fb93ce09\"\r\nlast-modified: Mon, 20 May 2024 15:20:31 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit grayscale, non-interlaced","md5":"98da0e93296691c4d482a5766535eef7","sha1":"ed39276c13293910ad73168c4365d4bb8032c806","sha256":"afca79b66582678d686f5c359bc658181f06ed4ee7c556537d303f3b95393e09","sha512":"08bdee0946fd99b2f26e3bcacdc54dbd44731868b3a13dad10ef6a24f9991ac8fb59d7f4438bfb2466b59292e778367e1aa8d47e3549982bbcce5f253abd62da","ssdeep":"","tlshash":"1921f9eba2719418d075b0ee7c151190a606204f01606085e5cbe5a13f9075f3c430fd","first_seen":"2023-07-20T12:41:33Z","last_seen":"2026-04-04T09:35:34.163008Z","times_seen":80,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/pluginfile.php/25/course/overviewfiles/im_curso.png","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:04.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /pluginfile.php/25/course/overviewfiles/im_curso.png HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:05 GMT\r\ncontent-type: image/png\r\ncontent-disposition: inline; filename=\"im_curso.png\"\r\ncache-control: public, max-age=3600, no-transform\r\nexpires: Tue, 24 Mar 2026 03:32:05 GMT\r\npragma: \r\naccept-ranges: bytes\r\netag: \"15465af973eb5109fd820ddc2d6c1059e5d11065\"\r\nlast-modified: Tue, 25 May 2021 13:57:38 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 728 x 91, 8-bit/color RGBA, non-interlaced","md5":"35dc66282b35ab8abf2d8140c389b875","sha1":"15465af973eb5109fd820ddc2d6c1059e5d11065","sha256":"d3116e86cbf3e66b3d67d0016fa7bd1991f67f6ce099d358373fb84b584dc0a1","sha512":"1a1892e2007d28ee7bb06faa03d1dcf2aca5b1c04ed130c4d0fd5b227d03f0dbff0bb7a97246f95b4c751ea745526f48892b0d90b45f6d99603385c1f2ec66d2","ssdeep":"384:9u8TcvdYHezS+FpN12dliJXpDcIgJ+1LKqK:pTiEezbEduwI+sK","tlshash":"ba42489f23d8ddc3d04dff3302acda7929b21be8458c5f6617b9bc9d2e026840b0a541","first_seen":"2025-12-21T07:50:29.920272Z","last_seen":"2026-03-24T02:32:33.756781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1705,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1705,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/pluginfile.php/2763/course/overviewfiles/hologram-projector-screen-with-cloud-system-technology.jpg","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:04.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /pluginfile.php/2763/course/overviewfiles/hologram-projector-screen-with-cloud-system-technology.jpg HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-disposition: inline; filename=\"hologram-projector-screen-with-cloud-system-technology.jpg\"\r\ncache-control: public, max-age=3600, no-transform\r\nexpires: Tue, 24 Mar 2026 03:32:05 GMT\r\npragma: \r\naccept-ranges: bytes\r\netag: \"9fde279e1a2bfe1ea94bab5682d57cbd278540d8\"\r\nlast-modified: Thu, 31 Mar 2022 16:21:08 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":15533552,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=19, height=3824, bps=230, compression=none, PhotometricInterpretation=RGB, description=Hologram projector screen with cloud system technology, manufacturer=NIKON CORPORATION, model=NIKON D810, orientation=upper-left, width=5736], baseline, precision 8, 5736x3824, components 3","md5":"6e8f19965e7f1cfa10391f0862550813","sha1":"e850f9a83cde52b80146af4d8dd3e16bd1d27eac","sha256":"6787288903a748ec8acd29506da175091c3077d69ee0765537ce7c85d8f55c52","sha512":"e977a29bf0150c11307d4ee96027c97ed4db34a4dd9bb4c7925a62391c41c9616731fc7bbbb7a0c7da60b338e5f26c38e6cc651e23760ea6b03ca4d6fd694f38","ssdeep":"24576:bkrOI8ktRSOoJAD6zXIvDJaaQvD6nrBmpbee6v:bkrOI80RdoJADoXIvDJLrsCe6v","tlshash":"cf252304bf666911fb946f30e4f2cb40475386ac6c338586319dd631af3a5399e9f2a3","first_seen":"2025-12-21T07:50:29.93716Z","last_seen":"2026-03-24T02:32:33.768302Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1889,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1889,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/requirejs.php/1681152964/core_form/events.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:05.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /lib/requirejs.php/1681152964/core_form/events.js HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=\"requirejs.php\"\r\nexpires: Mon, 22 Jun 2026 02:32:05 GMT\r\npragma: \r\ncache-control: public, max-age=7776000, immutable\r\naccept-ranges: none\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: \"80f67ae59e22e5db112a2ad44c16d1a6feae63e9\"\r\nlast-modified: Mon, 10 Apr 2023 18:56:09 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2231233,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15426)","md5":"a866fcaa987932118e3a481c7fd4d956","sha1":"1b8684f0ab7525f8d9435bda19567e4c01abfab7","sha256":"9e007f17c0b4341b84c9f717a832d6b8604e6e4d7183fea59fd11a9db72c722a","sha512":"6b93f3c34fbe1642c1ff191d4c959984dbdbc1f8203f1493623698a6a27d26485f84db64b02ae1e13e908ef8bca2bb8e4c2be8147a3fc5faf4899c6265ed42b1","ssdeep":"24576:LdGN3lvidd+nS2OGZO4m0DgQgf6CRdZXZ5tbh:LdGN3lvidd+nS2OGZO4m0DgQgf6ydZX7","tlshash":"ff253b2d3a54a4b665ef60f7711f160eb3365e9aa4801040bdd9ccec0ee4e85316bf7a","first_seen":"2025-12-21T07:50:29.885032Z","last_seen":"2026-03-24T02:32:33.769804Z","times_seen":2,"resource_available":false,"data":null}},"time_used":740,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":740,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/pluginfile.php/73/course/overviewfiles/im_curso.png","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:04.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /pluginfile.php/73/course/overviewfiles/im_curso.png HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:05 GMT\r\ncontent-type: image/png\r\ncontent-disposition: inline; filename=\"im_curso.png\"\r\ncache-control: public, max-age=3600, no-transform\r\nexpires: Tue, 24 Mar 2026 03:32:05 GMT\r\npragma: \r\naccept-ranges: bytes\r\netag: \"15465af973eb5109fd820ddc2d6c1059e5d11065\"\r\nlast-modified: Tue, 07 Dec 2021 13:41:19 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 728 x 91, 8-bit/color RGBA, non-interlaced","md5":"35dc66282b35ab8abf2d8140c389b875","sha1":"15465af973eb5109fd820ddc2d6c1059e5d11065","sha256":"d3116e86cbf3e66b3d67d0016fa7bd1991f67f6ce099d358373fb84b584dc0a1","sha512":"1a1892e2007d28ee7bb06faa03d1dcf2aca5b1c04ed130c4d0fd5b227d03f0dbff0bb7a97246f95b4c751ea745526f48892b0d90b45f6d99603385c1f2ec66d2","ssdeep":"384:9u8TcvdYHezS+FpN12dliJXpDcIgJ+1LKqK:pTiEezbEduwI+sK","tlshash":"ba42489f23d8ddc3d04dff3302acda7929b21be8458c5f6617b9bc9d2e026840b0a541","first_seen":"2025-12-21T07:50:29.920272Z","last_seen":"2026-03-24T02:32:33.756781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1098,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1098,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/theme/font.php/moove/core/1716218344/fontawesome-webfont.woff2?v=4.7.0","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:04.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /theme/font.php/moove/core/1716218344/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/theme/styles.php/moove/1716218344_1/all\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:05 GMT\r\ncontent-type: font/woff2\r\ncontent-disposition: inline; filename=\"fontawesome-webfont.woff2\"\r\nexpires: Mon, 22 Jun 2026 02:32:05 GMT\r\npragma: \r\ncache-control: public, max-age=7776000, immutable\r\naccept-ranges: none\r\netag: \"a854c77217ecaaccc7f7984c6820b06bfccc4df1\"\r\nlast-modified: Mon, 20 May 2024 15:19:07 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-05T09:48:04.107024Z","times_seen":412625,"resource_available":true,"data":null}},"time_used":1048,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1048,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/theme/yui_combo.php?m/1681152964/core/event/event-min.js\u0026m/1681152964/filter_mathjaxloader/loader/loader-min.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:04.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /theme/yui_combo.php?m/1681152964/core/event/event-min.js\u0026m/1681152964/filter_mathjaxloader/loader/loader-min.js HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:05 GMT\r\ncontent-type: application/javascript\r\ncontent-disposition: inline; filename=\"combo\"\r\nexpires: Fri, 19 Mar 2027 02:32:05 GMT\r\npragma: \r\ncache-control: public, max-age=31104000, immutable\r\naccept-ranges: none\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 11 Mar 2023 05:10:44 GMT\r\netag: \"3ae6a76d000b479dd9690fbdfb1c5a0b25111aa8\"\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2627,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2627), with no line terminators","md5":"76617687325f67884815a9b2b0d4e2be","sha1":"2f7b8734ca64306dad757d2a89fbd2dbb3cdb2fa","sha256":"01e644698fc787a38c18a7312893aaf9081b994f57f059ba3274361f7b09b206","sha512":"b57a28057b145bd4278e9f087c86476246b73c516463f2a1ac69875bf0092affb946d5c4bb932803fc571ec5f01622f63da3faa00ef608d05d86206875bf9401","ssdeep":"","tlshash":"7c51f189365c3c32416b639da3af318638b626cb121b851534254cd858bde4f45afbee","first_seen":"2023-03-07T13:02:37Z","last_seen":"2026-04-05T03:16:36.749962Z","times_seen":2276,"resource_available":true,"data":null}},"time_used":1191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/requirejs.php/1681152964/core/first.js","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:04.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /lib/requirejs.php/1681152964/core/first.js HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-disposition: inline; filename=\"requirejs.php\"\r\nexpires: Mon, 22 Jun 2026 02:32:05 GMT\r\npragma: \r\ncache-control: public, max-age=7776000, immutable\r\naccept-ranges: none\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: \"80f67ae59e22e5db112a2ad44c16d1a6feae63e9\"\r\nlast-modified: Mon, 10 Apr 2023 18:56:09 GMT\r\nx-powered-by: PHP/8.0.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2231233,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15426)","md5":"a866fcaa987932118e3a481c7fd4d956","sha1":"1b8684f0ab7525f8d9435bda19567e4c01abfab7","sha256":"9e007f17c0b4341b84c9f717a832d6b8604e6e4d7183fea59fd11a9db72c722a","sha512":"6b93f3c34fbe1642c1ff191d4c959984dbdbc1f8203f1493623698a6a27d26485f84db64b02ae1e13e908ef8bca2bb8e4c2be8147a3fc5faf4899c6265ed42b1","ssdeep":"24576:LdGN3lvidd+nS2OGZO4m0DgQgf6CRdZXZ5tbh:LdGN3lvidd+nS2OGZO4m0DgQgf6ydZX7","tlshash":"ff253b2d3a54a4b665ef60f7711f160eb3365e9aa4801040bdd9ccec0ee4e85316bf7a","first_seen":"2025-12-21T07:50:29.885032Z","last_seen":"2026-03-24T02:32:33.769804Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1490,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"procedimentos.mav.com.br/lib/ajax/service-nologin.php?info=core_output_load_fontawesome_icon_system_map\u0026cachekey=1716218344\u0026args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_output_load_fontawesome_icon_system_map%22%2C%22args%22%3A%7B%22themename%22%3A%22moove%22%7D%7D%5D","fqdn":"procedimentos.mav.com.br","domain":"mav.com.br","tld":"com.br"},"ip":{"addr":"164.152.244.121","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://procedimentos.mav.com.br/","date":"2026-03-24T02:32:07.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"procedimentos.mav.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 14:57:41 GMT","end":"Thu, 04 Jun 2026 14:57:40 GMT"},"fingerprint":{"sha1":"B7:B2:F4:6A:2F:6D:B0:78:E0:01:B4:A2:9B:7F:85:F0:00:7A:C8:1A","sha256":"A8:42:04:6E:26:74:3F:69:5F:E9:5C:9E:C9:0F:C0:13:ED:91:90:1B:7B:E3:AA:97:D2:FF:60:A0:FF:48:D3:86"}}},"request":{"raw":"GET /lib/ajax/service-nologin.php?info=core_output_load_fontawesome_icon_system_map\u0026cachekey=1716218344\u0026args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_output_load_fontawesome_icon_system_map%22%2C%22args%22%3A%7B%22themename%22%3A%22moove%22%7D%7D%5D HTTP/1.1\r\nHost: procedimentos.mav.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://procedimentos.mav.com.br/\r\nCookie: MoodleSession=ndac7b61pjhf6m5bakufh5l2g8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:32:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Mon, 22 Jun 2026 02:32:07 GMT\r\npragma: \r\ncache-control: public, max-age=7776000, immutable\r\nx-powered-by: PHP/8.0.30, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31623,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"aade1e17d46c42fcd55df4e317404f6e","sha1":"c562d77a5c950813e561289f20d86e60229b9901","sha256":"44b3f7562d0be227d7368c60df3bc74aa2989aac086b32072315fe2c12c653ac","sha512":"74452987a1824f19e767994f0f179cdae30e3e8832f4014438d040f6e2e3485cc87895762194c9211f1458197506544df2b9ef1435fbbde534f8290ef28e452f","ssdeep":"384:6o/mCUPdQXNMFlEEIR6GL2OTuCtuX3vZfd:68MijuCtuP1d","tlshash":"9be2723670cccae9d1eb76d60fb71961a8db1e07ca82444c9dbbdd8442cf67291132b9","first_seen":"2025-10-13T00:26:12.061058Z","last_seen":"2026-03-24T02:32:33.772302Z","times_seen":6,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}