Overview

URLsalads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
IP 162.241.2.87 (United States)
ASN#46606 UNIFIEDLAYER-AS-1
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-03 03:49:39 UTC
StatusLoading report..
IDS alerts0
Blocklist alert28
urlquery alerts No alerts detected
Tags None

Domain Summary (14)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-12-02 17:27:45 UTC 34.102.187.140
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 52.43.228.5
ocsp.pki.goog (9) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.131
www.googletagmanager.com (1) 75 2013-05-22 02:07:37 UTC 2022-12-02 23:54:19 UTC 142.250.74.168
www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-12-02 17:32:35 UTC 142.250.74.110
fonts.googleapis.com (2) 8877 2013-06-10 20:14:26 UTC 2022-12-02 23:08:34 UTC 142.250.74.106
r3.o.lencr.org (5) 344 No data No data 23.36.76.226
salads.com.br (47) 0 2020-02-08 00:10:00 UTC 2022-11-29 11:50:50 UTC 162.241.2.87 Unknown ranking
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-02 17:12:21 UTC 34.117.237.239
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
fonts.gstatic.com (6) 0 2014-09-09 00:40:21 UTC 2022-12-02 19:44:49 UTC 216.58.207.227 Domain (gstatic.com) ranked at: 540
region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2022-12-02 18:21:08 UTC 216.239.32.36 Domain (google-analytics.com) ranked at: 8401

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-11-09 2 salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e46 (...) Bank of America
2022-11-09 2 salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e46 (...) Bank of America

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-03 2 salads.com.br/wp-content/plugins/elementor/assets/lib/eicons/css/elementor- (...) Phishing
2022-12-03 2 salads.com.br/wp-content/uploads/elementor/css/post-3055.css?ver=1669048232 Phishing
2022-12-03 2 salads.com.br/wp-content/uploads/elementor/css/post-4400.css?ver=1669048233 Phishing
2022-12-03 2 salads.com.br/wp-content/uploads/elementor/css/global.css?ver=1669048233 Phishing
2022-12-03 2 salads.com.br/wp-content/uploads/elementor/css/post-4078.css?ver=1669048233 Phishing
2022-12-03 2 salads.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/soli (...) Phishing
2022-12-03 2 salads.com.br/wp-content/plugins/essential-addons-for-elementor-lite/assets (...) Phishing
2022-12-03 2 salads.com.br/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 Phishing
2022-12-03 2 salads.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/font (...) Phishing
2022-12-03 2 salads.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 Phishing
2022-12-03 2 salads.com.br/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae Phishing
2022-12-03 2 salads.com.br/wp-content/plugins/elementor/assets/js/frontend-modules.min.j (...) Phishing
2022-12-03 2 salads.com.br/wp-content/plugins/premium-addons-for-elementor/assets/fronte (...) Phishing
2022-12-03 2 salads.com.br/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js (...) Phishing
2022-12-03 2 salads.com.br/wp-content/plugins/elementor/assets/lib/share-link/share-link (...) Phishing
2022-12-03 2 salads.com.br/wp-content/themes/astra/assets/js/minified/style.min.js?ver=3.9.4 Phishing
2022-12-03 2 salads.com.br/wp-content/plugins/elementor-pro-v3.8.0/assets/js/webpack-pro (...) Phishing
2022-12-03 2 salads.com.br/wp-content/plugins/premium-addons-for-elementor/assets/fronte (...) Phishing
2022-12-03 2 salads.com.br/wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 Phishing
2022-12-03 2 salads.com.br/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 Phishing
2022-12-03 2 salads.com.br/wp-content/plugins/elementor-pro-v3.8.0/assets/js/frontend.mi (...) Phishing
2022-12-03 2 salads.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts (...) Phishing
2022-12-03 2 salads.com.br/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.8.1 Phishing
2022-12-03 2 salads.com.br/wp-content/plugins/elementor-pro-v3.8.0/assets/css/frontend.m (...) Phishing
2022-12-03 2 salads.com.br/wp-content/plugins/premium-addons-for-elementor/assets/fronte (...) Phishing
2022-12-03 2 salads.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 162.241.2.87
Date UQ / IDS / BL URL IP
2023-03-18 09:18:46 +0000 0 - 3 - 0 prejogo.life/ 162.241.2.87
2023-03-18 08:15:55 +0000 0 - 5 - 34 salads.com.br/boa/login.php?cmd=login_submit& (...) 162.241.2.87
2023-02-02 14:01:53 +0000 0 - 1 - 27 salads.com.br/boa/login.php?cmd=login_submit& (...) 162.241.2.87
2023-01-28 01:54:17 +0000 0 - 1 - 27 salads.com.br/boa/login.php?cmd=login_submit& (...) 162.241.2.87
2023-01-18 10:25:39 +0000 0 - 3 - 0 prejogo.life/ 162.241.2.87


Last 5 reports on ASN: UNIFIEDLAYER-AS-1
Date UQ / IDS / BL URL IP
2023-03-28 07:14:50 +0000 3 - 0 - 0 seveneventosrj.com.br/email/verification/js0v (...) 192.185.211.117
2023-03-28 07:14:26 +0000 3 - 0 - 0 seveneventosrj.com.br/email/verification/xrhp (...) 192.185.211.117
2023-03-28 07:10:34 +0000 0 - 3 - 9 paypal-support.com.desenvolvedortheosbank.com (...) 162.241.60.162
2023-03-28 07:06:33 +0000 3 - 0 - 0 seveneventosrj.com.br/email/verification/zcpg (...) 192.185.211.117
2023-03-28 07:06:27 +0000 3 - 0 - 0 seveneventosrj.com.br/email/verification/engl (...) 192.185.211.117


Last 5 reports on domain: salads.com.br
Date UQ / IDS / BL URL IP
2023-03-18 08:15:55 +0000 0 - 5 - 34 salads.com.br/boa/login.php?cmd=login_submit& (...) 162.241.2.87
2023-02-02 14:01:53 +0000 0 - 1 - 27 salads.com.br/boa/login.php?cmd=login_submit& (...) 162.241.2.87
2023-01-28 01:54:17 +0000 0 - 1 - 27 salads.com.br/boa/login.php?cmd=login_submit& (...) 162.241.2.87
2022-12-03 03:49:39 +0000 0 - 0 - 28 salads.com.br/boa/login.php?cmd=login_submit& (...) 162.241.2.87
2022-11-12 16:46:46 +0000 0 - 0 - 1 salads.com.br/boa/login.php?cmd=login_submit& (...) 162.241.2.87


Last 1 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-02-02 14:01:53 +0000 0 - 1 - 27 salads.com.br/boa/login.php?cmd=login_submit& (...) 162.241.2.87

JavaScript

Executed Scripts (39)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (85)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7164
Expires: Sat, 03 Dec 2022 05:48:52 GMT
Date: Sat, 03 Dec 2022 03:49:28 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6462
Cache-Control: max-age=116969
Date: Sat, 03 Dec 2022 03:49:28 GMT
Etag: "6389d3f3-1d7"
Expires: Sun, 04 Dec 2022 12:18:57 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:15 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         162.241.2.87
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 03 Dec 2022 03:49:28 GMT
Server: Apache
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Content-Length: 0
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - openphish: Bank of America
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 03:19:58 GMT
cache-control: public,max-age=3600
age: 1770
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6066
Expires: Sat, 03 Dec 2022 05:30:34 GMT
Date: Sat, 03 Dec 2022 03:49:28 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: e5a/MO5BVBZMo/vCZqwajm9NDAy5QmHCQ+sU8QANjoNyt4T5La8/2vbfWnZ965t2AUidXMGz25rgB/bKZA/fBQ==
x-amz-request-id: JV4KJXHQJ2CYCTSN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 03:46:58 GMT
age: 150
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 03 Dec 2022 03:49:28 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B38BFCEA5574BE4D3AD52506201AB275BCE355EF7F61801C888C1CCE3351EF52"
Last-Modified: Fri, 02 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21518
Expires: Sat, 03 Dec 2022 09:48:06 GMT
Date: Sat, 03 Dec 2022 03:49:28 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 03:08:58 GMT
cache-control: public,max-age=3600
age: 2430
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6443
Cache-Control: 'max-age=158059'
Date: Sat, 03 Dec 2022 03:49:28 GMT
Last-Modified: Sat, 03 Dec 2022 02:02:05 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: q1vugToPTQ+SMveAA5r68w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.43.228.5
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Q13phwmVps03bLlxXFAhXJfnhs4=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 03:49:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 03:49:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 03:49:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/chaty/css/chaty-front.min.css?ver=16612949913.0.3 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Nov 2022 14:49:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6513
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21881)
Size:   6513
Md5:    dfce581e1800e0ee98dc3d01f6ea7201
Sha1:   aa552a30e664b9153d2da9062488fe3e5cb81b26
Sha256: d9ce17004349fa80737dbc52707aa9c2a4c1d6182a479c2291461dd9f20a396f
                                        
                                            GET /wp-content/themes/astra/assets/css/minified/style.min.css?ver=3.9.4 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Nov 2022 14:50:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 17096
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (63030), with CRLF line terminators
Size:   17096
Md5:    6340dda955785b24be4d5cc8088804fd
Sha1:   0dc2cef74bc0608f1ce39a94bb4eb7a5da71f5d7
Sha256: 0c49bd705c7fdd14ed89c50b0e409be0dc578e60050a5cda1ed79f251ea5aedc
                                        
                                            GET /gtag/js?id=UA-164221465-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Dec 2022 03:49:29 GMT
expires: Sat, 03 Dec 2022 03:49:29 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44645
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   44645
Md5:    685aa3ab2dd98738c5dd6babe9810b37
Sha1:   f1184768c699f1354a148fb26335d8813724da0b
Sha256: ed49694de6d7df22639a7a343b5743f625a9b91c4395e0adb00447d660ca30e4
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 21 Nov 2022 16:30:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4008
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (19233)
Size:   4008
Md5:    2701214b028ad24fa347df8335b36d12
Sha1:   156bc8a7ad2657f00881890637f07c6052636499
Sha256: 9a6e62615ceeec7a9763e4f9614e4715d04fd87873b23db2b3ead06c996cad27

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 03:49:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 03:49:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/elementor/css/post-3055.css?ver=1669048232 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 21 Nov 2022 16:30:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 506
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1372)
Size:   506
Md5:    f0d03686de940f74907c727f51b67654
Sha1:   011a40f8273f98b71870d5c059d6d7fdeeae30c6
Sha256: 9d7a73e24210b68751a4617d3b3c1e10aba797b813aa152ee96dc4f89ffb35da

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.8.1 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 21 Nov 2022 16:30:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1609
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13766)
Size:   1609
Md5:    7e47cec420b48e49d1e640389561dea0
Sha1:   c2211071a56905121ef526b8860cc0b87ed37cc0
Sha256: caf6180227353323d2fcafeefcf9686c00034933ee249093ba6e61c10954228e
                                        
                                            GET /wp-content/uploads/elementor/css/post-4400.css?ver=1669048233 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 21 Nov 2022 16:30:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1106
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5440), with CRLF line terminators
Size:   1106
Md5:    6d817531f5b87b111e780ba18e67a417
Sha1:   54e9fa22c5518d2d219d3ae6942c300b488387c6
Sha256: 304a8c029e403e5d8c6ccbbe5fdcc59677f6e1bfc5e073a2a1b0e232f0e55014

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/elementor/css/global.css?ver=1669048233 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 21 Nov 2022 16:30:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9897
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (28067), with CRLF, LF line terminators
Size:   9897
Md5:    bef64933da90f14e5d65a493bc863d36
Sha1:   4ee4a0ca3787c47033770c1bc9de4ae3fb454d80
Sha256: 3ab61f525af18cdd32992b1185cdfb6cf5bf8d9712a9a72227eee1e523c06f47

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/elementor/css/post-4078.css?ver=1669048233 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 21 Nov 2022 16:30:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 461
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2123), with no line terminators
Size:   461
Md5:    83a2b4c36b2ffc83fe448a217ffd09d9
Sha1:   98d52ecb227582351ecea47c22a9fc63c0828270
Sha256: 40bf8a59bdaf8802e9a723b56ade52735b8c0d824abbae882f4a4b500678d8d7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.4.3 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 22 Nov 2022 12:37:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 900
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3432)
Size:   900
Md5:    1e0ef5b4ebd931aecd01564980628978
Sha1:   e618b92e03a6c4bd4abffed22abb1e835c05a601
Sha256: 1deef467f6db854d82e8c6288086664c7cf60a41b18bb7216d63bb83061ba878
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 21 Nov 2022 16:30:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 309
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (483)
Size:   309
Md5:    0ea43e394ddaae5fdb710dbbc8869e58
Sha1:   3b0c93adc80720236096201db5cc2751e703996d
Sha256: 85225fffa21a94bfd954393d7471069ab227b98fd8b51cb5ab4af5488168a34e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.4.3 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 22 Nov 2022 12:37:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3022
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (8185), with no line terminators
Size:   3022
Md5:    e0fea81cd5864819e1795e09fb0db808
Sha1:   f36029824f283e56db1752c034a4e3abc9d95eaf
Sha256: fcafe0fc6d4318bd5326aa1752906e097bd5defbb2062059ac89887dcf042f49

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 12 Apr 2022 05:56:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5321
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   5321
Md5:    710f8b142ea44c0682dc2c30f318f065
Sha1:   49144e9b3a76d3d383b1d4359cf7a25e947f4233
Sha256: 708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 21 Nov 2022 16:30:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12577
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (57726)
Size:   12577
Md5:    dc63c0a8e2d5857cc7a00a4b5456dabb
Sha1:   ee29df5eb2a4bf3eb805b160551c1afd84b42599
Sha256: 035ef40b1dd3df1eefb2dd3c8c2096425727fb939b06f3aa0bc6ef91dafd5441

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.8.1 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 21 Nov 2022 16:30:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2997
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10019)
Size:   2997
Md5:    c2b5af6052f630a96e450e5e2a3cea52
Sha1:   00ca76a8828a1bbec1534eb10786804fd36492f2
Sha256: 58f6cc2d4fa3e528622102975fb62949dc0170bd47b588a67318d18552a57d59
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4618
Md5:    acdb97105af28a7066790c6748ae2e1e
Sha1:   65794d2c5a9d04f747faf370bc8bacd330e69e5a
Sha256: dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 21 Nov 2022 16:30:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3747
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (12198), with no line terminators
Size:   3747
Md5:    e2a8decccf4d0a6b925af707a36077a9
Sha1:   26a0febc9c3d91e75410f74b9ec62099ba1cbe90
Sha256: 09e0e638a6f53c0fdcfeeb8ae91f3a404bef47b471324e335e29be14a2aa87f7
                                        
                                            GET /wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Nov 2022 14:50:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4233
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   4233
Md5:    3b62593186f7f91a9470ab6968ec5feb
Sha1:   bd7728c79c04f4f2f7a787097b0868e06ceba5ad
Sha256: 2a9920dc63cbd8228103c7d6bf2a044f06963041253c385c3cebb147297aa782

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.8.1 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 21 Nov 2022 16:30:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 13291
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (32907)
Size:   13291
Md5:    ec532bc72e833d74239248a507033f2d
Sha1:   e682bb6b3a3d8dce061c9974064efa177b286cbc
Sha256: 5225c44ca2b4081202505c1b0a9c16446eda2d51038ac8ed1a5eea1630b0541b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/headroom.min.js?ver=4.9.38 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 21 Nov 2022 16:30:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1565
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4289), with no line terminators
Size:   1565
Md5:    a906932a4810ce47aef805049b008746
Sha1:   abef23fcf127db458eb20339523e64249966c3ac
Sha256: 14e615fe12aa26f28a95a7f5f629c74e0013f0e307328ba1df0b09aadb6a63ca

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.8.1 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 21 Nov 2022 16:30:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2312
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4918)
Size:   2312
Md5:    afe0ea20b00c3b25a89a6b2d6a98c6ac
Sha1:   53c0425fb9abdc217a90ec20509996cd2a5f9e1d
Sha256: f70c2aa0ee7d185b9ded30b1f2037e4fbd828583d61f68eab99fd2f37b36b2a3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.8.1 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 21 Nov 2022 16:30:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1187
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2620), with no line terminators
Size:   1187
Md5:    55936584085d0d310919b755eda1ab3f
Sha1:   be317c3b2ed5143669375295b3107e591bf708da
Sha256: aad2265c39cafa6e01b791b1ef5025a2d237ee91346ef446beb722fdcd578d58

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 21 Nov 2022 16:30:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4200
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10544)
Size:   4200
Md5:    552977febe8ef2c71b0806dfaefd2552
Sha1:   01baebfd09383c5d44f066e7b5540fcca6a5eae4
Sha256: 7895907f5a4f54c08c4705b1a194e21c556d68027c5e0a70d4c05b377e712b1d
                                        
                                            GET /wp-content/plugins/elementor-pro-v3.8.0/assets/lib/sticky/jquery.sticky.min.js?ver=3.8.0 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Nov 2022 14:49:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1748
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3808)
Size:   1748
Md5:    44cacf382b1efaec2c09b3501c46f576
Sha1:   bc805b71304e479bdd433d1a58014ca29dfaf5fe
Sha256: 3805d0110db0197de2ce0f173afa957a1f0c2b40fc84e779077dbd93f71a4d64
                                        
                                            GET /wp-content/themes/astra/assets/js/minified/style.min.js?ver=3.9.4 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Nov 2022 14:50:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3584
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10398), with no line terminators
Size:   3584
Md5:    24a2e6342962f0d0c52ea626efb180aa
Sha1:   2390c50a381d2808316905a38e12cca282e20b32
Sha256: d45d38dadcffc780aba0024b0c745eff21fc6532990fd6ac484a7e5186502800

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/elementor-pro-v3.8.0/assets/js/webpack-pro.runtime.min.js?ver=3.8.0 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Nov 2022 14:49:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2475
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5191)
Size:   2475
Md5:    4f64e047f77f983d784ace34d0416784
Sha1:   dae5c0842ed9fe97a1063ebf6235a825c49cd8c4
Sha256: 21f982a0590251e893874a385b36718a32c372e266ff8ce0e3df957a5bebcb07

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/premium-nav-menu.min.js?ver=4.9.38 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 21 Nov 2022 16:30:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2934
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9286), with no line terminators
Size:   2934
Md5:    1c194258f90df48335431fe42f60993c
Sha1:   51ddde4f3956be3d7b8a8040ba2eaf7b3d77069d
Sha256: 09e1217f3c393f4a43109876f0143889f03d2c658b1dc9a9797fe9930e841b5e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/dist/hooks.min.js?ver=4169d3cf8e8d95a3d6d5 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1712
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4875)
Size:   1712
Md5:    6a452794a68bc140a53b30519b94edf6
Sha1:   68046f5611ba3cf5da1c46087609aff18f59fdc1
Sha256: 259990a9e6191a72a51ac9d038d0c52bb56d880a2b0d460b1fca3f3fee7961ed

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2675
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6475), with no line terminators
Size:   2675
Md5:    45bd1d6f7fc3a4069fc6fd400b90c961
Sha1:   903c7e28c7141e9fc1bdb4dfc62d043a97a01e2d
Sha256: c638a0057b4be0a61cfb65b1860a855a327397e9871f5dde28fa2f138fb394dc

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Nov 2022 14:50:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7621
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (17819), with no line terminators
Size:   7621
Md5:    66c68f2158dcf7d97a02f3719a17aab0
Sha1:   fdb04fb4c632b9fb4275006a4e402cd0d4fa393a
Sha256: e4b360f0e6ae1afc06f05f958e8696e5ae45257912bc2ab0b9334bd1382a51aa
                                        
                                            GET /wp-content/plugins/elementor-pro-v3.8.0/assets/js/frontend.min.js?ver=3.8.0 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Nov 2022 14:49:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7668
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21624)
Size:   7668
Md5:    172667bec56888e050739962545c72d7
Sha1:   fe4723f65e0208d489033acd2b8877d4ad84269c
Sha256: aeea25e6154739c10be0b414a3f6168aaabf3c2e8c54b8e7a926ad38f16398f7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Nov 2022 14:50:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8344
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (8189)
Size:   8344
Md5:    838560e989767f2ef5951b9eeee20352
Sha1:   6bf8419cb4d68d9beced9e4b79b22b347ae16a46
Sha256: 72e6d275c5229613a59aef94523fc6a96330553976aee003d8544d5806fa0c3d
                                        
                                            GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.8.1 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 21 Nov 2022 16:30:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16151
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (40474)
Size:   16151
Md5:    6aeb2153cae643eef82bc2bfd981284f
Sha1:   72ded3873d2eca2490b951a270c2ad90d2be820f
Sha256: e1f85226ca5e06d9aa02a495ab567529e78f5aeae6924566e58e18debe6f38bb
                                        
                                            GET /wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.8.1 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 21 Nov 2022 16:30:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16899
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (43101)
Size:   16899
Md5:    38a87ff524e8c045d28f62eb94a0cd7a
Sha1:   fe483c45a46432fdec74917f92e814730adef61b
Sha256: e9c68236f1feaae21075cfdc23e4f06c99e303b089c0e5718a93ca83a42b27dc
                                        
                                            GET /wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/lottie.min.js?ver=4.9.38 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 21 Nov 2022 16:30:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   96152
Md5:    440ce930c9b223c20241e690d3a581dd
Sha1:   93dd78b7be94b9eeb9112086b3d609440d0f9ae8
Sha256: acd23fdd07f5148d7671745447163e1dd46402e3b5b40e39ce1f44d23fd50e21
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 03:49:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 03:49:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://salads.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 202535
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 03:49:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/bitter/v28/rax8HiqOu8IVPmn7f4xp.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://salads.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30896
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Dec 2022 00:43:34 GMT
expires: Sun, 03 Dec 2023 00:43:34 GMT
cache-control: public, max-age=31536000
age: 11155
last-modified: Fri, 24 Jun 2022 18:46:28 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 30896, version 1.0\012- data
Size:   30896
Md5:    a7332c352b59e1d882b5770b68ed9db5
Sha1:   6a4b2b9a2b35ae86769e0c6a0a6decbf67300db6
Sha256: c470360f2548fb327562d8ce35185a96f59ab6daeb56c0d45ab712b63de848da
                                        
                                            GET /s/dmsans/v11/rP2Hp2ywxg089UriCZOIHQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://salads.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18096
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 22:11:26 GMT
expires: Fri, 01 Dec 2023 22:11:26 GMT
cache-control: public, max-age=31536000
age: 106683
last-modified: Thu, 21 Apr 2022 16:54:12 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 18096, version 1.0\012- data
Size:   18096
Md5:    f29503a1895affee5ed85d0246238af8
Sha1:   f474c6e8a3e4e28fb68cf7fb29bd448cdfeb0278
Sha256: 7164a212fb4df27bf1e006342d1686badcba58f5a5d301772c14cc7adf1d4821
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://salads.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 202514
last-modified: Wed, 11 May 2022 19:24:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Size:   15860
Md5:    e9f5aaf547f165386cd313b995dddd8e
Sha1:   acdef5603c2387b0e5bffd744b679a24a8bc1968
Sha256: f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
                                        
                                            GET /s/dmsans/v11/rP2Cp2ywxg089UriASitCBimCw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://salads.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18212
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 22:11:50 GMT
expires: Fri, 01 Dec 2023 22:11:50 GMT
cache-control: public, max-age=31536000
age: 106659
last-modified: Thu, 21 Apr 2022 16:54:14 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 18212, version 1.0\012- data
Size:   18212
Md5:    ca72fb4e277e59be50b8850190822581
Sha1:   159b97b22006fe2a483da0a13d33cfb3cc5aa031
Sha256: f3c0fa2cd71bb91d0e3acf5d77b93c49a184e9ad941532ca8c07c82eb0bd6a6c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 03:49:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://salads.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: font/woff2
                                        
last-modified: Mon, 21 Nov 2022 16:30:16 GMT
accept-ranges: bytes
content-length: 78196
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Size:   78196
Md5:    e8a427e15cc502bef99cfd722b37ea98
Sha1:   a9922842a120a7f1eaced667480c5e185a106d69
Sha256: d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/elementor-pro-v3.8.0/assets/js/preloaded-elements-handlers.min.js?ver=3.8.0 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Nov 2022 14:49:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   51279
Md5:    73fb0a6bc782f3e5fd2558c32a4c4e0a
Sha1:   fe6221cdb2daffe667b1f0b22863bec52e916f11
Sha256: ca96ed5595d87dca4479276b19d1134156a0da2854ef5e0f42638bee6708a55d
                                        
                                            GET /wp-content/uploads/2022/08/salads-logo-branco-1536x682.png HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Tue, 23 Aug 2022 22:37:47 GMT
accept-ranges: bytes
content-length: 63570
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1536 x 682, 8-bit gray+alpha, non-interlaced\012- data
Size:   63570
Md5:    4b1f278fdac836af3bd116e4c7b9ccd5
Sha1:   ac980bff5201d7194d184121d1a7a921bf5aff90
Sha256: e95d248ad7fa4a44a471cc76f05cfbbb1f7822b51805e0a0ed6bdbef2b509172
                                        
                                            GET /s/bitter/v28/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLjOXQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://salads.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16140
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 04:25:43 GMT
expires: Sun, 26 Nov 2023 04:25:43 GMT
cache-control: public, max-age=31536000
age: 602627
last-modified: Fri, 24 Jun 2022 18:45:56 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16140, version 1.0\012- data
Size:   16140
Md5:    4487ec4bbeb4a1191d9c56bcff9b9262
Sha1:   02f0c52b3c5e47ef6c105ef253401dd45e4f013f
Sha256: 3b1f0c650eb15d9eb32681ed84b5360c5e6327f9704b6efd76a6e3ac126b8bd0
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.110
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 03 Dec 2022 02:41:08 GMT
expires: Sat, 03 Dec 2022 04:41:08 GMT
cache-control: public, max-age=7200
age: 4102
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /wp-content/uploads/2020/08/cropped-salads-favicon-32x32.png HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Cookie: chatyWidget_0=[{"k":"v-widget","v":"2022-12-03T03:49:28.149Z"},{"k":"v-Whatsapp","v":"2022-12-03T03:49:28.149Z"}]; activechatyWidgets=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Mon, 17 Aug 2020 22:38:49 GMT
accept-ranges: bytes
content-length: 1079
date: Sat, 03 Dec 2022 03:49:30 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size:   1079
Md5:    c0739b565370de3108acf60fd82fc8ed
Sha1:   49b168087759cbbbc5e92cfcc4e3b95d2e1d3e32
Sha256: dd1c3ee655ec20d2984289348c634313bb3f1b0c7ddd19769a086877e0d9f4ad
                                        
                                            GET /wp-content/uploads/2020/08/cropped-salads-favicon-192x192.png HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Cookie: chatyWidget_0=[{"k":"v-widget","v":"2022-12-03T03:49:28.149Z"},{"k":"v-Whatsapp","v":"2022-12-03T03:49:28.149Z"}]; activechatyWidgets=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Mon, 17 Aug 2020 22:38:49 GMT
accept-ranges: bytes
content-length: 4421
date: Sat, 03 Dec 2022 03:49:30 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Size:   4421
Md5:    5115da35e345f197b1d435f92c668640
Sha1:   fb3b9e84779083aff092ee7555539634998ea7f3
Sha256: a0334f7ac43c570e1b04441cd28df3064aa7d2c3e560be60324d1188adcc792b
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3063
Expires: Sat, 03 Dec 2022 04:40:33 GMT
Date: Sat, 03 Dec 2022 03:49:30 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3063
Expires: Sat, 03 Dec 2022 04:40:33 GMT
Date: Sat, 03 Dec 2022 03:49:30 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F741da48c-a860-42fc-8f5c-4572522c2f56.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6416
x-amzn-requestid: f5456dd6-8459-4a19-a9b5-b7b567fceb01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cik2pG5aoAMFrVg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a81c3-0923232b35133f471332062b;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 22:52:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8TZjwYhWWdmfZcne3lTU9GR4TqsEjoslXu5WxuF0arKiup8-kBjqbQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 23:08:35 GMT
age: 16855
etag: "34b768eb68f6cb850ff984fd687096e089649523"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6416
Md5:    585e7e56aed6b2f2f5e658f46bb791c4
Sha1:   34b768eb68f6cb850ff984fd687096e089649523
Sha256: 5412ba902e667571b0bbb3879ba6b9ad39501abce59381e84e6aa09779e7198b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F690354e1-4f19-43a3-a840-dac23e2cbe16.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10454
x-amzn-requestid: 3c95e941-d127-43a5-a338-7fff4e751367
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cTPfcG82IAMF2JA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63845f95-4dde51fa769890d057216cfa;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 07:13:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GaPRHeLJCWSLgGsYaCxii5UNLcRbVsBJV-XvSnDid4KzIqGqLWCc7Q==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 08:18:23 GMT
age: 70267
etag: "3f75442d8577c6272b9a3fdf2c5d1305c5e02703"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10454
Md5:    94556ef834fbd97092ea3e546fece90d
Sha1:   3f75442d8577c6272b9a3fdf2c5d1305c5e02703
Sha256: 0e49c3b246f4f999404e408e5326c636584f18ddaeec4ff50ffdd74ad48b9dd3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4803
x-amzn-requestid: ad2d9243-5e32-4faf-8ff3-b9abd3af1e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1_hEJJIAMF4Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387d063-596f5833509112ee6cbedf54;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:51:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PIC-TIeTFK_Y2AiqowYT4_8tMuzIKO23lAwx18fYepTf4PIWkmLqkQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 05:20:15 GMT
age: 80955
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4803
Md5:    cc0a257323f882caff067adb86d906e4
Sha1:   cedf2f21be7cd366bd46055b62b5513db3011dfc
Sha256: c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57219d7e-330b-4d3f-a472-55cd262c7dc1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10877
x-amzn-requestid: bebc4f7f-7349-4973-99f5-d6c3b8a27072
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZN1G2uIAMFryg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f25-0637a1a946db78074bc19dc3;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wtaahzdJXnHSYwqIlHyqFy-LsdPl1Nh-CThm-x57bU3dUEgrfB1Gvw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:37:47 GMT
age: 22303
etag: "bb36d39c7adf764e8a7dcf7f91125001623975b4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10877
Md5:    dbee75c6c314655f738b57b828bef016
Sha1:   bb36d39c7adf764e8a7dcf7f91125001623975b4
Sha256: fd40949b9711db01be746d1723f78c2bb04d356063c6249b8b5ae1470532367a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d568a89-ee21-427a-b971-0d1500164a62.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11942
x-amzn-requestid: ba8a5d03-7796-4c6d-a6df-3cc71b1c5259
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: chqukGmWoAMFtLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a24c3-609dc90d769060d30a16e3df;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 16:16:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: m6j_3bDGFIAHQYzrZ1zXqUb-HbEJ8XCoGH5mgBFOWRbLzoSiuNBnhg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:37:55 GMT
etag: "c8bd6bd9086e0a52b83b89dfd755e7ebba222fb8"
age: 22295
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11942
Md5:    becc8cdba57494c6fe212eb67634e1eb
Sha1:   c8bd6bd9086e0a52b83b89dfd755e7ebba222fb8
Sha256: fbb25b88b10a818bb0c6ad385b1e5ba54b87672c73bfa8a9c1ecb17dcc689d5a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F652bfe35-9b09-4fba-b7b5-c6bd90cccdbe.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6119
x-amzn-requestid: b0bf3aed-f968-4ebb-953e-35300d74ef16
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdCe8GgNIAMFQag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63884ac5-4b20ca67753e65c5232660f5;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 06:33:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: axyk2U1R7AX1RVQmdc303S2S2CUs_RgphyeYPsbGveGHMAjY3KEzdw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 13:19:35 GMT
age: 52195
etag: "398fd2d837c73f54c4591b69cd683f29bdf9184a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6119
Md5:    7ffa12df550123f63b20f67437cd8a04
Sha1:   398fd2d837c73f54c4591b69cd683f29bdf9184a
Sha256: fd9ac4396488098923c27531295e64475047dd008a901e59915109a73a69f305
                                        
                                            POST /g/collect?v=2&tid=G-337VFVTX2L&gtm=2oebu0&_p=2058600350&cid=260748137.1670039368&ul=en-us&sr=1280x1024&_s=1&sid=1670039368&sct=1&seg=0&dl=https%3A%2F%2Fsalads.com.br%2Fboa%2Flogin.php%3Fcmd%3Dlogin_submit%26id%3D6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25%26session%3D6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&dt=P%C3%A1gina%20n%C3%A3o%20encontrada%20-%20Salad%27s&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://salads.com.br
Connection: keep-alive
Referer: https://salads.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         216.239.32.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://salads.com.br
date: Sat, 03 Dec 2022 03:49:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /css?family=Bitter&ver=6.1.1 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 03 Dec 2022 03:49:29 GMT
date: Sat, 03 Dec 2022 03:49:29 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.8.1 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 21 Nov 2022 16:30:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/elementor-pro-v3.8.0/assets/css/frontend.min.css?ver=3.8.0 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Nov 2022 14:49:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-css/premium-addons.min.css?ver=4.9.38 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 21 Nov 2022 16:30:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         162.241.2.87
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://salads.com.br/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 03 Dec 2022 03:49:28 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: Bank of America
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 21 Nov 2022 16:21:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Nov 2022 14:50:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/chaty/js/cht-front-script.min.js?ver=16612949913.0.3 HTTP/1.1 
Host: salads.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/boa/login.php?cmd=login_submit&id=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25&session=6961ae8b3cf0c0b986c0f968e4689d256961ae8b3cf0c0b986c0f968e4689d25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         162.241.2.87
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Nov 2022 14:49:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 03 Dec 2022 03:49:29 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CDM+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CBitter%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://salads.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 03 Dec 2022 03:49:29 GMT
date: Sat, 03 Dec 2022 03:49:29 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---