Overview

URLwww.paesetoth.com.br/
IP 108.179.193.33 (United States)
ASN#26337 OIS1
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-02 11:21:45 UTC
StatusLoading report..
IDS alerts0
Blocklist alert156
urlquery alerts No alerts detected
Tags None

Domain Summary (17)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
ocsp.digicert.com (2) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 682 1593 93.184.220.29
ocsp.pki.goog (13) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 4459 9098 142.250.74.131
www.googletagmanager.com (1) 75 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 388 95028 142.250.74.168
stats.g.doubleclick.net (1) 96 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 493 567 108.177.14.154
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
fonts.gstatic.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 981 30010 216.58.207.227
googleads.g.doubleclick.net (2) 42 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1486 2709 142.250.74.34
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2372 34.102.187.140
www.google.com (2) 7 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1452 2070 142.250.74.164
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3245 58438 34.120.237.76
r3.o.lencr.org (8) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2704 7089 23.33.119.27
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
www.paesetoth.com.br (61) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 30409 976317 108.179.193.33
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 54.148.84.125
fonts.googleapis.com (2) 8877 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 846 6845 142.250.74.106
www.google.no (3) 25607 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1963 2325 142.250.74.163
region1.analytics.google.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 711 567 216.239.34.36

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-02 medium www.paesetoth.com.br/ Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/themes/astra/assets/css/minified/compatibil (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/themes/astra/assets/css/minified/style.min. (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/themes/astra/assets/css/minified/menu-anima (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/cookie-law-info/legacy/public/css/c (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/themes/astra-child/style.css?ver=1.0.0 Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/mega-addons-for-visual-composer/css (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/mega-addons-for-visual-composer/css (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/testimonial-free/src/Frontend/asset (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/testimonial-free/src/Frontend/asset (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/revslider/public/assets/fonts/font- (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/cookie-law-info/legacy/public/css/c (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/themes/astra/assets/js/minified/style.min.j (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/wpfront-scroll-top/js/wpfront-scrol (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/contact-form-7/includes/css/styles. (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/themes/astra/assets/css/minified/compatibil (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/contact-form-7/includes/js/index.js (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/contact-form-7/includes/swv/js/inde (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/revslider/public/assets/css/rs6.css (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 Malware
2022-12-02 medium www.paesetoth.com.br/ Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/wp-whatsapp/assets/js/whatsapp-popu (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/js_composer/assets/js/dist/js_compo (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/testimonial-free/src/Frontend/asset (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/testimonial-free/src/Frontend/asset (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/testimonial-free/src/Frontend/asset (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/uploads/2021/05/target_78925.ico Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/uploads/2021/05/business_vision_growing_ico (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/contact-form-7/includes/swv/js/inde (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/contact-form-7/includes/js/index.js (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/js_composer/assets/css/js_composer. (...) Malware
2022-12-02 medium www.paesetoth.com.br/wp-content/plugins/revslider/public/assets/js/rbtools. (...) Malware

mnemonic secure dns
Scan Date Severity Indicator Comment
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed

Quad9 DNS
Scan Date Severity Indicator Comment
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed
2022-12-02 medium paesetoth.com.br Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 108.179.193.33
Date UQ / IDS / BL URL IP
2023-05-20 02:28:33 UTC 0 - 1 - 0 www.cabelo.med.br/media/system/css/file.php%7 (...) 108.179.193.33
2022-12-26 02:38:20 UTC 0 - 0 - 6 vestibular.fetac.com.br/ 108.179.193.33
2022-12-01 22:26:08 UTC 0 - 0 - 10 www.paesetoth.com.br/ 108.179.193.33
2022-12-01 22:22:32 UTC 0 - 0 - 10 www.paesetoth.com.br/ 108.179.193.33
2022-12-02 11:21:45 UTC 0 - 0 - 156 www.paesetoth.com.br/ 108.179.193.33


Last 5 reports on ASN: OIS1
Date UQ / IDS / BL URL IP
2023-06-06 10:33:05 UTC 0 - 0 - 2 www.ankleandfootphysicians.com/ 108.167.135.72
2023-06-05 03:40:39 UTC 0 - 0 - 3 hopperr.com/v/BOINFA/verifynupdate/login.php? (...) 162.241.216.122
2023-06-05 02:40:32 UTC 22 - 0 - 21 hopperr.com/v/BOINFA/verifynupdate/login.php? (...) 162.241.216.122
2023-06-05 01:55:25 UTC 22 - 0 - 21 hopperr.com/v/BOINFA/verifynupdate/login.php? (...) 162.241.216.122
2023-06-04 22:40:32 UTC 22 - 0 - 22 hopperr.com/v/BOINFA/login.php?cmd=login_subm (...) 162.241.216.122


Last 3 reports on domain: paesetoth.com.br
Date UQ / IDS / BL URL IP
2022-12-01 22:26:08 UTC 0 - 0 - 10 www.paesetoth.com.br/ 108.179.193.33
2022-12-01 22:22:32 UTC 0 - 0 - 10 www.paesetoth.com.br/ 108.179.193.33
2022-12-02 11:21:45 UTC 0 - 0 - 156 www.paesetoth.com.br/ 108.179.193.33


No other reports with similar screenshot

JavaScript

Executed Scripts (36)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (109)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8912
Expires: Fri, 02 Dec 2022 13:50:05 GMT
Date: Fri, 02 Dec 2022 11:21:33 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6573
Cache-Control: max-age=89952
Date: Fri, 02 Dec 2022 11:21:33 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 12:20:45 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 11:18:12 GMT
cache-control: public,max-age=3600
age: 201
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6485
Expires: Fri, 02 Dec 2022 13:09:38 GMT
Date: Fri, 02 Dec 2022 11:21:33 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: xkpOeGZ2E4SHbExCQ5f6C59iSkc4qOzaCSTpvm/9/ho/Jl0dwpyDeG+AvCCHx7zHfDB4Eb45iVU=
x-amz-request-id: 633JGMGSB3V7DZ1S
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 10:46:05 GMT
age: 2128
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Fri, 02 Dec 2022 11:21:33 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET / HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             108.179.193.33
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                            
Date: Fri, 02 Dec 2022 11:21:33 GMT
Server: Apache
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://www.paesetoth.com.br/
Content-Length: 0
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 11:08:57 GMT
cache-control: public,max-age=3600
age: 757
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6569
Cache-Control: max-age=171289
Date: Fri, 02 Dec 2022 11:21:34 GMT
Etag: "6389c02e-1d7"
Expires: Sun, 04 Dec 2022 10:56:23 GMT
Last-Modified: Fri, 02 Dec 2022 09:06:54 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "1AB57FD18D31495E801A29CB1779B501196E6CD72DCA6B0F9E76FF82DD72013C"
Last-Modified: Thu, 01 Dec 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21582
Expires: Fri, 02 Dec 2022 17:21:16 GMT
Date: Fri, 02 Dec 2022 11:21:34 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GJ7LExgJO97tivEu7uUErw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             54.148.84.125
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: h8gIIz8K7xJ5ewhjrMT/kilg/BE=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 02 Dec 2022 11:21:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/astra/assets/css/minified/compatibility/page-builder/vc-plugin.min.css?ver=3.9.4 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 01:24:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 317
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1161), with no line terminators
Size:   317
Md5:    5a61e9857353de27a9f3c0ea5dfd0ee2
Sha1:   9862ccbe9918e36446f45658ed154bfd63807fd9
Sha256: e7cda7acbca4e38a0fd54e975fffe493a96d8817c55615a6e7999049ab9c1b91

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 02 Dec 2022 11:21:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/astra/assets/css/minified/style.min.css?ver=3.9.4 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 00:51:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 17093
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (63032)
Size:   17093
Md5:    6a1f3b9e8dbd63fed5689cca326e209e
Sha1:   f82950f58142ce13af0ad4ab7a33db1d3b5346aa
Sha256: 8384a87a5c707d7c917c69436c15af69fa471e177ea0bdfae249511d7e9dc814

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Thu, 01 Dec 2022 23:46:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5321
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   5321
Md5:    710f8b142ea44c0682dc2c30f318f065
Sha1:   49144e9b3a76d3d383b1d4359cf7a25e947f4233
Sha256: 708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=3.9.4 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 00:51:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 468
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3412), with no line terminators
Size:   468
Md5:    f88a6a529851c8ed1ffe2bd83219e490
Sha1:   597ff167b702900ee4473e31e390808b8de95664
Sha256: ae20c6ea52a0534fdda58a7ae13839ac66194434406e00a3bb5f4538f9909886

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /gtag/js?id=G-GHR6KLXFEY HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 11:21:34 GMT
expires: Fri, 02 Dec 2022 11:21:34 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 94311
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (31627)
Size:   94311
Md5:    a11ddb05c624ac72201ece24ae11ce3f
Sha1:   38f637e4e43b476a84f08e9c97bad6e2b4c76e8e
Sha256: 74f83dcd1fe543870e89fed0661fe32ce6a154facdce248077ac319ff498b81a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 02 Dec 2022 11:21:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 02 Dec 2022 11:21:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.0.5 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 11:10:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 986
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   986
Md5:    af8993893cf0e8840cfa07c28152f7d7
Sha1:   020642adb362f41142e612a4aed05f187cc6fbe0
Sha256: a76fed90a602ac9bc687d6889a8dac2bd929437f84af088f257a3559543841cc

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.0.5 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 11:10:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8481
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   8481
Md5:    7973e77b98802c0ea2d4016644d1f06c
Sha1:   3859b417c6bef2db0058724fad81e5df2166fe27
Sha256: 148eeddc5b558d00af2517b77f689158b9dea1a6bf52e6e8cd9ece6e0cf0cca9

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/testimonial-free/src/Frontend/assets/css/font-awesome.min.css?ver=2.5.11 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 00:59:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6707
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (28900)
Size:   6707
Md5:    f66f7eb69da6f8b450b88b11c8a11d05
Sha1:   1bf463952e18f3c0574e2371bf77ed1ff2498197
Sha256: a9fff3b21c64c26eef14becf06b6b4ce4dd49adcf8e2d5d7e95e1c80f21855f9

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/astra-child/style.css?ver=1.0.0 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Thu, 01 Dec 2022 23:48:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 713
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (916)
Size:   713
Md5:    42b21c64ef73bacb2f342b12ebaf6f61
Sha1:   190d311e893e2926780d416681f0555e84c0a979
Sha256: 905d041de928aa367bbf5d322ad1efc50e0e4a1c441645d319c0f6d511b3088c

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/mega-addons-for-visual-composer/css/font-awesome/css/all.css?ver=6.1.1 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 00:38:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12653
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   12653
Md5:    507f7ee2f564b2d8a47068727a046324
Sha1:   5bed87e326f45a58cf757dd4c631451a84d11376
Sha256: 172285e37cf753fe740b126050a44c5b84ff60af72e56080ecad41de8c65fdee

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/mega-addons-for-visual-composer/css/style.css?ver=6.1.1 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Thu, 01 Dec 2022 23:58:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 196
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   196
Md5:    90ded252a707a11d8bcabef55e0173e2
Sha1:   e12f0e8354da247bb73843c4db5e85fad299638e
Sha256: e784bc0869eed4b84863ce6b5758c49d15ebd4448e2b3eed3af1d3fae9543b89

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/pum/pum-site-styles.css?generated=1669155165&ver=1.16.14 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 11:19:59 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5102
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7444), with CRLF, LF line terminators
Size:   5102
Md5:    8e1d502f1acb302e6e6f7faf8bf53fad
Sha1:   574412ce27b7e09de4d614c2fc3a7c7deb7049f1
Sha256: 998bdb5409d877d40642cbff369e932e06b11ea4103a0c55810dc8c7cedd160c

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/wpfront-scroll-top/css/wpfront-scroll-top.min.css?ver=2.0.7.08086 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 00:03:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 215
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (426)
Size:   215
Md5:    9d32642fe94e8f0ec70965b2352a4605
Sha1:   56763124e9a6ef28f1964eda3c8929b07db9f5b8
Sha256: cf4d839276d4f6fe895ca1db07fb3854e9b87699c7881ccf893ce6b38042259d

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/testimonial-free/src/Frontend/assets/css/deprecated-style.min.css?ver=2.5.11 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 00:59:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 567
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1708), with no line terminators
Size:   567
Md5:    a9707410a7088f9d82adaf37c2a3f2c9
Sha1:   d833d75859283d25562897e84c04889d0e66e48f
Sha256: 69ddccf1c6062a397e9570206288d770a82e72ac4b2c48130f98b25f7d39920e

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Thu, 01 Dec 2022 23:54:46 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4618
Md5:    acdb97105af28a7066790c6748ae2e1e
Sha1:   65794d2c5a9d04f747faf370bc8bacd330e69e5a
Sha256: dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2020/03/logo-350x69.png HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Fri, 02 Dec 2022 00:06:43 GMT
accept-ranges: bytes
content-length: 4978
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 350 x 69, 8-bit/color RGBA, non-interlaced\012- data
Size:   4978
Md5:    719d82837d3fbe5b36ac687cf39de0b0
Sha1:   716dff2d570957dbbce66080708816b9065ae1db
Sha256: bddfc205bd001b6d4506868aa92d97300dd672f453413513c2a4ca0fd194fb4d

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/revslider/public/assets/assets/dummy.png HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Fri, 02 Dec 2022 11:17:48 GMT
accept-ranges: bytes
content-length: 68
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Size:   68
Md5:    2a637d3d825673c0e3462fa4ed9a1c5c
Sha1:   81668d396da22832d75a986407ff10035e0d5899
Sha256: 69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/testimonial-free/src/Frontend/assets/css/style.min.css?ver=2.5.11 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 00:59:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1167
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4364), with no line terminators
Size:   1167
Md5:    878d7488c3c68a5bb0f9d9b1cdee0779
Sha1:   cd12616b23fded09300f6fee1d65c477e659eac3
Sha256: e584da426739670077dd21b2628b42a7ef50dca4726f8193a204ba049a32070e

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.0.5 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Fri, 02 Dec 2022 11:10:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 10776
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   10776
Md5:    68f31f156fec9521abc5d50798a55dc4
Sha1:   c7d367dacd71e2bddd30350391370db876bbbbc3
Sha256: f0b996f22ccaed017e0617619ca0e130ee87a482ad4e042398900a41f32f4f7d

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/wpfront-scroll-top/images/icons/1.png HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Fri, 02 Dec 2022 00:28:33 GMT
accept-ranges: bytes
content-length: 773
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Size:   773
Md5:    93f66586b9c8b7ec4a5316f23d89e1eb
Sha1:   e9397f9512f3592393923b71dfe25674a83503d5
Sha256: 5a0dca92ff50b14535e86aa2ff9063acfe78830f1086726e6ff2670d32ba3d08

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/testimonial-free/src/Frontend/assets/css/swiper.min.css?ver=2.5.11 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 00:59:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5358
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (16213)
Size:   5358
Md5:    bd7aabb80f367213be8d560ab2016d78
Sha1:   ecb8ca329ab052c6e03766f438594fe930728ca2
Sha256: 733338eed6dc6f9fb91f26431374e28e6035e9fa18ff899b04ea46bc1730317c

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/revslider/public/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: font/woff2
                                            
last-modified: Fri, 02 Dec 2022 01:15:14 GMT
accept-ranges: bytes
content-length: 77160
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size:   77160
Md5:    af7ae505a9eed503f8b8e6982036873e
Sha1:   d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
Sha256: 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-table.css?ver=3.0.5 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 11:10:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2063
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (401)
Size:   2063
Md5:    1946fa94d19bd69c8edd1ec6d873a6d4
Sha1:   214e5376828aa6b147a95e3b63b29097d5639342
Sha256: 6d3214f741ac53c54b4b0d4eaa6e70a07d820dde9095da674ad8f2bc2a00b401

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/astra/assets/js/minified/style.min.js?ver=3.9.4 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Fri, 02 Dec 2022 00:51:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3584
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10398), with no line terminators
Size:   3584
Md5:    24a2e6342962f0d0c52ea626efb180aa
Sha1:   2390c50a381d2808316905a38e12cca282e20b32
Sha256: d45d38dadcffc780aba0024b0c745eff21fc6532990fd6ac484a7e5186502800

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/wpfront-scroll-top/js/wpfront-scroll-top.min.js?ver=2.0.7.08086 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Fri, 02 Dec 2022 00:03:21 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 737
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (543)
Size:   737
Md5:    9da5e48500888328ff314cb371f52cd2
Sha1:   bdd02af36c414a0bf60bc4fc82e14c4ece354726
Sha256: 3858c8bd6f92c3b29fc437061c01fa4f9b1b8e2ca7e8e888ff5babbd4a81ae05

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                            
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/astra/assets/css/minified/compatibility/contact-form-7-main.min.css?ver=3.9.4 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                            
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/wp-whatsapp/assets/js/whatsapp-button.js?ver=3.2.1 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Fri, 02 Dec 2022 00:26:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 451
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   451
Md5:    2cbb2b431f51472b160ee5177f584f6a
Sha1:   0a7dc89f53c513fa63437a6d42e7612ef4072994
Sha256: 542ff8abd5797378bf66e504fbcd1ba9adb45e57369fe71ccc903d534ed13dc6

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /css?family=Jura%3A400&display=fallback&ver=3.9.4 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Dec 2022 11:21:34 GMT
date: Fri, 02 Dec 2022 11:21:34 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (51719)
Size:   5353
Md5:    a0d2834d1f672cf30afd5f5daceea4ac
Sha1:   45e8deb38f35c20f51fda2ca1c000359f18410fe
Sha256: 42427ea930582595919b356994232665e437f2f44889073c2a1dcb43b5681a19
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                            
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                            
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/revslider/public/assets/fonts/font-awesome/css/font-awesome.css HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 01:15:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7306
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (372)
Size:   7306
Md5:    39de35ae45c888d9eb25e297affba1b9
Sha1:   3225a1e4521ba7591a27745d60b4e51efdf2635b
Sha256: 0e82d159ca10913be4c0220676e497eabf57ec2fdaee2406fe887777ffcfae66

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.31 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 11:17:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16598
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (12602)
Size:   16598
Md5:    a9d5c5e61ed280a0cb9128265c72c2f6
Sha1:   4e472d81bf83d7be514f6292932de32ab5be7c65
Sha256: 6c9c8d6cc5a88c27a8f5a3ae7bb8d802a2b9e4b61862171e22e800435094a873

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Fri, 02 Dec 2022 00:12:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8344
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (8189)
Size:   8344
Md5:    838560e989767f2ef5951b9eeee20352
Sha1:   6bf8419cb4d68d9beced9e4b79b22b347ae16a46
Sha256: 72e6d275c5229613a59aef94523fc6a96330553976aee003d8544d5806fa0c3d

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET / HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
vary: User-Agent,Accept-Encoding
last-modified: Thu, 01 Dec 2022 23:46:55 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=0, no-cache, no-store, must-revalidate
pragma: no-cache
expires: Mon, 29 Oct 1923 20:30:00 GMT
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (34047)
Size:   54514
Md5:    848682d58edaed0daacfa09261c72b04
Sha1:   ba9ca6da08a5a0477b879956b46cfc4817fb16af
Sha256: 46825647771e721332dccf5997630405d3d5b0cd0366ecb59377f9ba11d3fab3

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/wp-whatsapp/assets/js/whatsapp-popup.js?ver=6.1.1 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Fri, 02 Dec 2022 00:26:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 291
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   291
Md5:    00021be9910089c4ac4192ff08025905
Sha1:   b9056c380e58263a10319539d83cd7adadee5c69
Sha256: dfaffd20072b35ac0f06f5ae7e3cba0e6c87346b46016b346f1f277ce9bf6042

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/js_composer/assets/lib/vc_waypoints/vc-waypoints.min.js?ver=6.9.0 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Fri, 02 Dec 2022 00:36:15 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3306
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (8853)
Size:   3306
Md5:    5e64f5fd6495dfc1fc6e4e09633ce3c6
Sha1:   f25ab01843b551a17392b49e62de0ee55b3b42b2
Sha256: 9a1fa9a504e2329245fe415f0ac5642579a9a745c854f6e9a1ff6cd01f5b604a

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.9.0 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Fri, 02 Dec 2022 00:34:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7183
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20096)
Size:   7183
Md5:    0d6847600aac71ee1e060272e8795d90
Sha1:   efcad83a912cd1d9fc5ccb901169769ad268e378
Sha256: 8c105b6acc26cfa2d4cf910c10044bd1e39fec92333adc9fc43681ede25ce103

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/testimonial-free/src/Frontend/assets/js/sp-scripts.min.js?ver=2.5.11 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Fri, 02 Dec 2022 00:59:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 796
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2233), with no line terminators
Size:   796
Md5:    81087c684cf9936f6389b0b8ef4a00a8
Sha1:   e7324313f6e0f74102ab0311bdacd5257fe98c70
Sha256: 82c55ed9401f10d5ee27e7271d82023b3bec40021efcfb4424d3c5167e1e07c3

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 02 Dec 2022 11:21:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/jura/v24/z7NOdRfiaC4Vd8hhoPzfb5vBTP1d7ZumR_g.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.paesetoth.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 27 Nov 2022 03:28:28 GMT
expires: Mon, 27 Nov 2023 03:28:28 GMT
cache-control: public, max-age=31536000
age: 460387
last-modified: Mon, 11 Jul 2022 19:14:59 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 12368, version 1.0\012- data
Size:   12368
Md5:    3314f64b0f64d217f4634436af6eb00c
Sha1:   403b9cf60804dd3703b26fd8d769be7385f64442
Sha256: 556aa1daaa6b8cf5ca5adab45d2153b4ae002829782576820be1ad95c3a9e133
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.paesetoth.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 143261
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            GET /wp-content/uploads/2021/06/fundo13.png HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Fri, 02 Dec 2022 00:10:35 GMT
accept-ranges: bytes
content-length: 476302
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 2500 x 1784, 8-bit/color RGBA, non-interlaced\012- data
Size:   476302
Md5:    e25cc6c6458a92e61370798143167593
Sha1:   29c5b852bc065add3b7ab1522c6b42efc9eed865
Sha256: 9ccf249e5e0a9994a0d2cb5d03244bed33a4f2ecfda49d86b0816281ce7d2300

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/testimonial-free/src/Frontend/assets/js/swiper.min.js?ver=2.5.11 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Fri, 02 Dec 2022 00:59:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   63404
Md5:    acd9980ea64732f3c91859dd81f74760
Sha1:   99556964e6c3d7a24595f0729781797bd2c5b9c4
Sha256: 41d1cac480b1e189b2f9cced9c494ea99f06c534ccf78bf29ac91c996fc54537

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 02 Dec 2022 11:21:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/testimonial-free/src/Frontend/assets/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.paesetoth.com.br/wp-content/plugins/testimonial-free/src/Frontend/assets/css/font-awesome.min.css?ver=2.5.11
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: font/woff2
                                            
last-modified: Fri, 02 Dec 2022 00:59:08 GMT
accept-ranges: bytes
content-length: 71896
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Size:   71896
Md5:    e6cf7c6ec7c2d6f670ae9d762604cb0b
Sha1:   97e438cc545714309882fbceadbf344fcaddcec5
Sha256: 7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2021/05/target_78925.ico HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: image/x-icon
                                            
last-modified: Fri, 02 Dec 2022 00:09:40 GMT
accept-ranges: bytes
content-length: 38078
cache-control: max-age=604800
expires: Fri, 09 Dec 2022 11:21:35 GMT
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 96x96, 32 bits/pixel\012- data
Size:   38078
Md5:    8192760e50402777fa9a1e71dd0ebedb
Sha1:   2e49653632f1448d64c2cf13d16eb3ade6970ad8
Sha256: 9e4f28909e1588c8ece088b26f4a708c996ac0f407d82631a80f52e3fcd5b0d3

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2021/05/business_vision_growing_icon_152041.ico HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: image/x-icon
                                            
last-modified: Fri, 02 Dec 2022 00:07:16 GMT
accept-ranges: bytes
content-length: 38078
cache-control: max-age=604800
expires: Fri, 09 Dec 2022 11:21:35 GMT
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 96x96, 32 bits/pixel\012- data
Size:   38078
Md5:    142b8c454b9a65fe03be336fe722b04c
Sha1:   710fdcd986eb7304d72619a015ba36b1f1aabaff
Sha256: 40c77e157c14fb1838cdefa42f17c818d600aa23988b1a1d9e2153e0d3be1a9b

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                            
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Cookie: _ga_GHR6KLXFEY=GS1.1.1669980093.1.0.1669980093.60.0.0; _ga=GA1.1.837212408.1669980094; _gcl_au=1.1.1748646039.1669980094
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                            
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 02 Dec 2022 11:21:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 02 Dec 2022 11:21:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 02 Dec 2022 11:21:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 02 Dec 2022 11:21:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-GHR6KLXFEY&cid=837212408.1669980094&gtm=2oebu0&aip=1&z=1003536388 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.163
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 11:21:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/viewthroughconversion/952871846/?random=1669980093833&cv=11&fst=1669980093833&fmt=3&bg=ffffff&guid=ON&async=1&gtm=2oebu0&u_w=1280&u_h=1024&label=Xz3qCICqo9oDEKbXrsYD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.paesetoth.com.br%2F&tiba=HOME%20%E2%80%94%20Paes%20e%20Toth%20Consultores%20Associados&auid=1748646039.1669980094&data=event%3Dconversion&gcp=1&ct_cookie_present=1 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.34
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 11:21:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 02-Dec-2022 11:36:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-conversion/952871846/?random=1669980093833&cv=11&fst=1669980093833&bg=ffffff&guid=ON&async=1&gtm=2oebu0&u_w=1280&u_h=1024&label=Xz3qCICqo9oDEKbXrsYD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.paesetoth.com.br%2F&tiba=HOME%20%E2%80%94%20Paes%20e%20Toth%20Consultores%20Associados&auid=1748646039.1669980094&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.164
HTTP/2 302 Found
content-type: text/javascript; charset=UTF-8
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 11:21:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/952871846/?random=1669980093833&cv=11&fst=1669980093833&bg=ffffff&guid=ON&async=1&gtm=2oebu0&u_w=1280&u_h=1024&label=Xz3qCICqo9oDEKbXrsYD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.paesetoth.com.br%2F&tiba=HOME%20%E2%80%94%20Paes%20e%20Toth%20Consultores%20Associados&auid=1748646039.1669980094&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   63
Md5:    0339f8f57d1bf75003db591e28957e45
Sha1:   ae2286e497c9f76a02cb40c40a674b73bd293b76
Sha256: 609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
                                        
                                            GET /pagead/viewthroughconversion/952871846/?random=1669980093826&cv=11&fst=1669980093826&bg=ffffff&guid=ON&async=1&gtm=2oebu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.paesetoth.com.br%2F&tiba=HOME%20%E2%80%94%20Paes%20e%20Toth%20Consultores%20Associados&auid=1748646039.1669980094&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.34
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 11:21:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 910
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 02-Dec-2022 11:36:35 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1929), with no line terminators
Size:   910
Md5:    4c46683d619f01e92f241c0568f619bf
Sha1:   aa360a7cdace690c964606922a058f72bddcbacc
Sha256: 7977aa3b615266cc779a1c5914e2b9dd51784ec2d95d568d0e8c4dfa99c2218f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 02 Dec 2022 11:21:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2020/03/favicon_PTCA.gif HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Cookie: _ga_GHR6KLXFEY=GS1.1.1669980093.1.0.1669980093.60.0.0; _ga=GA1.1.837212408.1669980094; _gcl_au=1.1.1748646039.1669980094
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: image/gif
                                            
last-modified: Fri, 02 Dec 2022 00:06:40 GMT
accept-ranges: bytes
content-length: 1623
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16\012- data
Size:   1623
Md5:    1c963fba8546f5a127e8fb75f84838f0
Sha1:   921e4831dda655cb618c90c55fd0535b7980e801
Sha256: 9674614f7a0c6d729e3aeab7088a2374e596c23c90f2b3503fd3d9dc1d88ad7c

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 02 Dec 2022 11:21:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/1p-user-list/952871846/?random=1669980093826&cv=11&fst=1669978800000&bg=ffffff&guid=ON&async=1&gtm=2oebu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.paesetoth.com.br%2F&tiba=HOME%20%E2%80%94%20Paes%20e%20Toth%20Consultores%20Associados&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=827297239&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.163
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 11:21:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/952871846/?random=1669980093826&cv=11&fst=1669978800000&bg=ffffff&guid=ON&async=1&gtm=2oebu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.paesetoth.com.br%2F&tiba=HOME%20%E2%80%94%20Paes%20e%20Toth%20Consultores%20Associados&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=827297239&rmt_tld=0&ipr=y HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.164
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 11:21:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-conversion/952871846/?random=1669980093833&cv=11&fst=1669980093833&bg=ffffff&guid=ON&async=1&gtm=2oebu0&u_w=1280&u_h=1024&label=Xz3qCICqo9oDEKbXrsYD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.paesetoth.com.br%2F&tiba=HOME%20%E2%80%94%20Paes%20e%20Toth%20Consultores%20Associados&auid=1748646039.1669980094&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.paesetoth.com.br/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.163
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 11:21:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   63
Md5:    0339f8f57d1bf75003db591e28957e45
Sha1:   ae2286e497c9f76a02cb40c40a674b73bd293b76
Sha256: 609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 02 Dec 2022 11:21:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7504
Expires: Fri, 02 Dec 2022 13:26:39 GMT
Date: Fri, 02 Dec 2022 11:21:35 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7504
Expires: Fri, 02 Dec 2022 13:26:39 GMT
Date: Fri, 02 Dec 2022 11:21:35 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7504
Expires: Fri, 02 Dec 2022 13:26:39 GMT
Date: Fri, 02 Dec 2022 11:21:35 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7504
Expires: Fri, 02 Dec 2022 13:26:39 GMT
Date: Fri, 02 Dec 2022 11:21:35 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7504
Expires: Fri, 02 Dec 2022 13:26:39 GMT
Date: Fri, 02 Dec 2022 11:21:35 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 06:00:48 GMT
age: 19247
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6174
Md5:    b986f9fcbeca91ed5c8d58fbfaf47d19
Sha1:   6e6c8bd2bce144cc4da1cd7be375b046b60dca79
Sha256: 07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8863
x-amzn-requestid: 798d014b-0f9c-4787-a676-8f5e8fae3d11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdG14HBNIAMFdWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851bf-7549feac6d476a8512676412;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: r_0F64VpyutAOJ9IcTWrs3Sv--fhKiwKsV1FW0fOMSRt1QLLPxvJzg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 13:21:56 GMT
age: 79179
etag: "fc71ae3cae92ed6011904bb2367f23bf4e69fab4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, max compression\012- data
Size:   9363
Md5:    376f09cc4d6db16c1bfc15fb88dba181
Sha1:   434445fd676495b4333a9eda787ff7eff207be3f
Sha256: 64f505258533035df881fa168db24bcf43f9631760d4ea1ded8adc283a855c7b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb2cfbf1-2aef-40a6-97e1-99a756e32924.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 13461
x-amzn-requestid: 8c0121a6-cf29-4cd0-bd42-d9f67af62b84
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQsyGhGoAMF1-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c7eb-593f28367320530e2dcafbfb;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:03:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: npt-A-TEzjd-QRTVhv5FMJhwlYujCRCF7tyYbathxjCdCFFEwh_vEQ==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 06:42:38 GMT
age: 16737
etag: "8fe32fffe672f0e91ce773af0e4be960f55bad08"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13461
Md5:    16a112f00456d38c4c9e051ccf40e105
Sha1:   8fe32fffe672f0e91ce773af0e4be960f55bad08
Sha256: 43517bbcd17ec6d05d09a4c0d183610acdc7e2fa4767cb786cb8b936d5f44402
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 11402
x-amzn-requestid: 20c2c359-1e43-40c0-885d-1c90e76ea12b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGzJHu-IAMFbYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e7a-1d89722e767daa014b174a39;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OJBnbjJB_kvPuJcePGnno3zI0CTWAzV-Osb2L1hPZZhlNYhFHWmLsA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:51:33 GMT
age: 48602
etag: "aa944d10fe4a44b790b01ef62edc0f85a6d558e3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11402
Md5:    1c80b8025242ddfcc816ec612456b99e
Sha1:   aa944d10fe4a44b790b01ef62edc0f85a6d558e3
Sha256: a9f060bc15738a3fe257e0c81a29e4611a89c273bcbb2765ce856d4e854a5f1f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4803
x-amzn-requestid: ad2d9243-5e32-4faf-8ff3-b9abd3af1e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1_hEJJIAMF4Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387d063-596f5833509112ee6cbedf54;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:51:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PIC-TIeTFK_Y2AiqowYT4_8tMuzIKO23lAwx18fYepTf4PIWkmLqkQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 05:20:15 GMT
age: 21680
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4803
Md5:    cc0a257323f882caff067adb86d906e4
Sha1:   cedf2f21be7cd366bd46055b62b5513db3011dfc
Sha256: c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6882
x-amzn-requestid: 6b5f15a5-c15b-46bf-9fd5-5d013d37a0eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGfrG3WIAMFc9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891dfd-6038ca700dfb4489230c2683;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2O6x-8-ESFDtlhcjVyGxEXCZcLbbfhsCVQeX02lbNMupPWmM-fKuLA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:54 GMT
age: 49601
etag: "45cf5e1a54ee491497ffe08a8e39fe97ba3c8a48"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6882
Md5:    25c68d8b1fae82820f93efca500fd848
Sha1:   45cf5e1a54ee491497ffe08a8e39fe97ba3c8a48
Sha256: f0ec6b6f6ba0a931c9b71f5bc7ad1e5b89c8e4d8b7441f35eeebfba418d0e588
                                        
                                            GET /wp-content/plugins/revslider/public/assets/assets/loader.gif HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.31
Cookie: _ga_GHR6KLXFEY=GS1.1.1669980093.1.0.1669980093.60.0.0; _ga=GA1.1.837212408.1669980094; _gcl_au=1.1.1748646039.1669980094; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: image/gif
                                            
last-modified: Fri, 02 Dec 2022 11:17:50 GMT
accept-ranges: bytes
content-length: 2545
date: Fri, 02 Dec 2022 11:21:36 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 24 x 24\012- data
Size:   2545
Md5:    4b3afb84b2b71ef56df09997a350bd04
Sha1:   accdac8a7abeab0e21c49539aad0a973addb28ef
Sha256: 9034d5d34015e4b05d2c1d1a8dc9f6ec9d59bd96d305eb9e24e24e65c591a645

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            POST /g/collect?v=2&tid=G-GHR6KLXFEY&gtm=2oebu0&_p=1767274659&_gaz=1&cid=837212408.1669980094&ul=en-us&sr=1280x1024&_s=1&sid=1669980093&sct=1&seg=0&dl=https%3A%2F%2Fwww.paesetoth.com.br%2F&dt=HOME%20%E2%80%94%20Paes%20e%20Toth%20Consultores%20Associados&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1 
Host: region1.analytics.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.paesetoth.com.br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                        
                                             216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                            
access-control-allow-origin: https://www.paesetoth.com.br
date: Fri, 02 Dec 2022 11:21:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /g/collect?v=2&tid=G-GHR6KLXFEY&cid=837212408.1669980094&gtm=2oebu0&aip=1 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.paesetoth.com.br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                        
                                             108.177.14.154
HTTP/2 204 No Content
content-type: text/plain
                                            
access-control-allow-origin: https://www.paesetoth.com.br
date: Fri, 02 Dec 2022 11:21:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /wp-content/uploads/uag-plugin/custom-style-blocks.css?ver=2.0.16 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Thu, 01 Dec 2022 23:49:21 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 00:12:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /devsite/wp-content/uploads/2020/03/background.jpg HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Cookie: _ga_GHR6KLXFEY=GS1.1.1669980093.1.0.1669980093.60.0.0; _ga=GA1.1.837212408.1669980094; _gcl_au=1.1.1748646039.1669980094; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                            
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.paesetoth.com.br/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 02 Dec 2022 11:21:36 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /devsite/wp-content/uploads/2021/05/coronavirus-4914026_1920.jpg HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Cookie: _ga_GHR6KLXFEY=GS1.1.1669980093.1.0.1669980093.60.0.0; _ga=GA1.1.837212408.1669980094; _gcl_au=1.1.1748646039.1669980094; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                            
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.paesetoth.com.br/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 02 Dec 2022 11:21:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /css?family=Roboto:400&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Dec 2022 11:21:34 GMT
date: Fri, 02 Dec 2022 11:21:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /wp-content/plugins/mega-addons-for-visual-composer/css/ihover.css?ver=6.1.1 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Thu, 01 Dec 2022 23:58:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /devsite/wp-content/uploads/2020/03/background.jpg HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Cookie: _ga_GHR6KLXFEY=GS1.1.1669980093.1.0.1669980093.60.0.0; _ga=GA1.1.837212408.1669980094; _gcl_au=1.1.1748646039.1669980094; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                            
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.paesetoth.com.br/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 02 Dec 2022 11:21:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/wp-whatsapp/assets/dist/css/style.css?ver=6.1.1 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 00:47:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /devsite/wp-content/uploads/2021/05/coronavirus-4914026_1920.jpg HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Cookie: _ga_GHR6KLXFEY=GS1.1.1669980093.1.0.1669980093.60.0.0; _ga=GA1.1.837212408.1669980094; _gcl_au=1.1.1748646039.1669980094; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                            
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.paesetoth.com.br/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 02 Dec 2022 11:21:36 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /devsite/wp-content/uploads/2020/03/cloud-computing-2001090_1920.jpg HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Cookie: _ga_GHR6KLXFEY=GS1.1.1669980093.1.0.1669980093.60.0.0; _ga=GA1.1.837212408.1669980094; _gcl_au=1.1.1748646039.1669980094; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                            
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.paesetoth.com.br/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 02 Dec 2022 11:21:36 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Thu, 01 Dec 2022 23:54:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.9.0 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Fri, 02 Dec 2022 00:15:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 02 Dec 2022 11:21:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Fri, 02 Dec 2022 11:17:55 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - fortinet: Malware
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.31 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Fri, 02 Dec 2022 11:17:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/pum/pum-site-scripts.js?defer&generated=1669155165&ver=1.16.14 HTTP/1.1 
Host: www.paesetoth.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paesetoth.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             108.179.193.33
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Fri, 02 Dec 2022 11:19:59 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 02 Dec 2022 11:21:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - mnemonic_dns: Sinkholed
  - quad9: Sinkholed