r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 03c3cfc567661cca575e54ad505acd08
e73f7955b0c794a9cf8ff77b3ecaf436354521fe
50017e6eb57c5bcaa8dc74af6e3967362ec6b8f177a5bf722dd2d215698c4fa9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50017E6EB57C5BCAA8DC74AF6E3967362EC6B8F177A5BF722DD2D215698C4FA9"
Last-Modified: Sun, 09 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17470
Expires: Mon, 10 Oct 2022 23:16:35 GMT
Date: Mon, 10 Oct 2022 18:25:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3d0ffae9abfdf558a6286013a0201c8b
2dc8ea0000a1b0c0f849611fdd73429bca51bfad
8e19eab9b6d16819f9ef3920971542cbcf5dd18280617e2de1a3827f0c149398
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8E19EAB9B6D16819F9EF3920971542CBCF5DD18280617E2DE1A3827F0C149398"
Last-Modified: Sun, 09 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5719
Expires: Mon, 10 Oct 2022 20:00:44 GMT
Date: Mon, 10 Oct 2022 18:25:25 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: C5foRWjGhD/T/tfLcQCqPa9AZ4C6EltHN1dJG6+7VfkLeTVADpZG2hIDLQA1lsxQa79BC8xim7p0J5xoWGdWvw==
x-amz-request-id: BR89DH7TRZ2TTRDW
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 10 Oct 2022 17:32:35 GMT
age: 3170
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
18.165.201.80200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 18.165.201.80:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 10 Oct 2022 18:08:03 GMT
Expires: Mon, 10 Oct 2022 18:28:17 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 133321d9ca8be95a19f574700824c0e0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: O3rZrrHT8Y-_eQbzj6gwRHCbspSL5YAZlmxcK-HVc9Gh1KSzB4HVYQ==
Age: 1042
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 10 Oct 2022 18:25:25 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
lavesc.com.br/
108.179.192.103301 Moved Permanently 0 B IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 10 Oct 2022 18:25:25 GMT
Server: nginx/1.21.6
Content-Type: text/html; charset=UTF-8
Content-Length: 0
X-Redirect-By: WordPress
Location: https://lavesc.com.br/
X-Server-Cache: true
X-Proxy-Cache: EXPIRED
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
18.165.201.80200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 18.165.201.80:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Mon, 10 Oct 2022 18:14:45 GMT
Cache-Control: max-age=3600
Expires: Mon, 10 Oct 2022 18:33:11 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 ed5bf73eea0876436de4cbcd6f6945e4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: 8nWJZq15atvcL4MbAXx6BaDOuSoVYRmBwGsVHT00v738nM-iZRLjTQ==
Age: 2628
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a64642647d5bced1ae7c75c74c851841
ea7a3d2875ee21535ac5068690b8a67154b1f56a
d4f27e733e1e36058f1dbf6dbd16be94c4a06c8e1603faadab9d00a67851a552
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D4F27E733E1E36058F1DBF6DBD16BE94C4A06C8E1603FAADAB9D00A67851A552"
Last-Modified: Sun, 09 Oct 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 11 Oct 2022 00:25:26 GMT
Date: Mon, 10 Oct 2022 18:25:26 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d545bc725dcd5d6f1dfc10a8b35aeb3a
82d92587953dac8a05d691730b8318719328de6b
9d1e6f1bf4b1c138d9e07e67264cb9ac5090a1c338ff72c87e1758e187cccb24
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3337
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:26 GMT
Last-Modified: Mon, 10 Oct 2022 17:29:49 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.89.136.7101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.89.136.7:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BL9NKo0xTVSP+rI7gEwcSQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: uxk+LP0YLGY2fWnjvcuFPOvp47E=
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash b80398e65c98d84250756256d31eed2d
3cc23d1d91745ddd04ee676f51762f37c0bcdbd3
f2cb6fda3fdbd8f04d380e7841875d322353864124bb5b25ce36fb327a2bfded
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash b80398e65c98d84250756256d31eed2d
3cc23d1d91745ddd04ee676f51762f37c0bcdbd3
f2cb6fda3fdbd8f04d380e7841875d322353864124bb5b25ce36fb327a2bfded
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lavesc.com.br/wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=2.5.1
108.179.192.103200 OK 468 B URL HTTP/2 lavesc.com.br/wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=2.5.1
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3412), with no line terminators
Hash f88a6a529851c8ed1ffe2bd83219e490
597ff167b702900ee4473e31e390808b8de95664
ae20c6ea52a0534fdda58a7ae13839ac66194434406e00a3bb5f4538f9909886
GET /wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=2.5.1 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 05 Aug 2020 21:20:15 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 468
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-includes/css/dist/block-library/style.min.css?ver=2b419261812329f36938de953d18353f
108.179.192.103200 OK 17 kB URL HTTP/2 lavesc.com.br/wp-includes/css/dist/block-library/style.min.css?ver=2b419261812329f36938de953d18353f
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (43771)
Hash 2a67a4888baa44de739f3fe56203ce07
da175eae57f26b655747d79f055477e3fee1abb9
3a4d7627476a0099ca4bcc101685f27de04cb49dd66ef842d72c6cda270599dd
GET /wp-includes/css/dist/block-library/style.min.css?ver=2b419261812329f36938de953d18353f HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 04 Jul 2022 20:40:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16594
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-includes/js/wp-emoji-release.min.js?ver=2b419261812329f36938de953d18353f
108.179.192.103200 OK 5.3 kB URL HTTP/2 lavesc.com.br/wp-includes/js/wp-emoji-release.min.js?ver=2b419261812329f36938de953d18353f
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15660)
Hash 710f8b142ea44c0682dc2c30f318f065
49144e9b3a76d3d383b1d4359cf7a25e947f4233
708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=2b419261812329f36938de953d18353f HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 12 Apr 2022 14:26:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5321
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/elementor/css/post-442.css?ver=1637337795
108.179.192.103200 OK 466 B URL HTTP/2 lavesc.com.br/wp-content/uploads/elementor/css/post-442.css?ver=1637337795
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1324), with no line terminators
Hash 6e1ea401fdff2ced586f25e771da3e25
7e0fe51b66fa269f0aefcb22ffd00be5aa5384e6
767e26ddc4cd3e12636168a7f7f9c4a7330c7674f81fdae418723b8194d38511
GET /wp-content/uploads/elementor/css/post-442.css?ver=1637337795 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:03:15 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 466
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.4.8
108.179.192.103200 OK 612 B URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.4.8
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3815)
Hash 351dc3d43706f39312e37197334a15c6
8aab8d6587a0c97237a83df2747e8fc6034d42c9
4ad029fbfe97cc137d8bcf701da5d2f117fc81c095a29f5176b2bf9a7bf6358d
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.4.8 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 612
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.5
108.179.192.103200 OK 323 B URL HTTP/2 lavesc.com.br/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.5
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash b24c24b7da3ffeed6ae8ade102a4d317
c4445b3977ce704b927508108e100213eea67a3c
5421ad49b70f379553eaceec744d753e74d4b065966c08aa7c7dd949553ca9a8
GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.5 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:13 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 323
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.13.0
108.179.192.103200 OK 3.9 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.13.0
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (18854)
Hash a8e4e62d75f18e9c5c9e064123c3d00c
88971e45c79dca0b22d1f84384988192c0fd954e
da98e89b06a8f7fba5ed086a079eba1e3cfaa40aa671d5ffd8c04248badf0517
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.13.0 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3923
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
108.179.192.103200 OK 309 B URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (483)
Hash 0ea43e394ddaae5fdb710dbbc8869e58
3b0c93adc80720236096201db5cc2751e703996d
85225fffa21a94bfd954393d7471069ab227b98fd8b51cb5ab4af5488168a34e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 309
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=4.6.1
108.179.192.103200 OK 13 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=4.6.1
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (59158)
Hash e6b67e11736ae36a062b381717f2ea9f
a663a79bc8d42aa58bfea1351cc27e0d0b09c9b2
a07a94d36246d0b3e5b9b18e274e31995d0e23cda955babf5e350e91a879523d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=4.6.1 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12862
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/elementor/css/post-2409.css?ver=1652910298
108.179.192.103200 OK 1.4 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/elementor/css/post-2409.css?ver=1652910298
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6873), with no line terminators
Hash 0005ea31f7aa269bb31db1c8dabd2458
5f3b79ebd00e7ef67832e62cb983adda98211945
8bd50e2566ad621d05ffe89b8ae0bd63800066a10f4c8240591967db6af94063
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-2409.css?ver=1652910298 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 May 2022 21:44:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1411
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.4.8
108.179.192.103200 OK 4.4 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.4.8
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (26516)
Hash fdd462f58aee3f9349eabdefb5ca0b57
bb6e017d5537630516ccb98952593690a8c69864
ca51806fcedbe90dd613c4c28673af8693381806a5cb3b43dce2ea4f43e8b314
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.4.8 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4436
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/elementor/css/post-2056.css?ver=1652910247
108.179.192.103200 OK 8.3 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/elementor/css/post-2056.css?ver=1652910247
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (48294)
Hash 656fa25435c03377d356ad66fee2ec8f
ebcdfa884e6d700deab878b6f8ad7662425a6ad9
f40015384fc6703c455afce63b4677f52fea10e481df645d3599d0bd4d2c8b60
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-2056.css?ver=1652910247 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 May 2022 21:44:07 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8295
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/novotel-150x150.png
108.179.192.103200 OK 8.5 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/novotel-150x150.png
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 51102dc9de1b99b010508f6b0f313e1e
3e5ce68191718e24cff1be253ac93b1af18467e1
9e023fe31294d1e21b481300a6ac76b16ac7e687efa7d71e9ef750702a462862
GET /wp-content/uploads/2021/06/novotel-150x150.png HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Jun 2021 00:58:27 GMT
accept-ranges: bytes
content-length: 8499
content-type: image/png
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/1-2.png
108.179.192.103200 OK 10 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/1-2.png
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash 451e65aa5b6618cf5b138c61879bf9c9
235dccda1a1f17a209e39f5c39cb0c81ef3cb2be
ea743c7a6c47c670d32ed46e47d8be0fa6a12daf708b3f9dddcc8995e7af8dea
GET /wp-content/uploads/2021/06/1-2.png HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 23 Jun 2021 12:55:04 GMT
accept-ranges: bytes
content-length: 10169
content-type: image/png
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/5.png
108.179.192.103200 OK 11 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/5.png
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash 0c21abbee2078c95d494b544519ebd9e
8d805bbd4eb47b6732d300131de61a6521e288fc
8e82e3b4c42054d7764eeafe5df6c7908263d1ee2bff8e7b0f378bfde99796d6
GET /wp-content/uploads/2021/06/5.png HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 23 Jun 2021 12:55:13 GMT
accept-ranges: bytes
content-length: 10909
content-type: image/png
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/2-1.png
108.179.192.103200 OK 15 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/2-1.png
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash 20efd712e5d2289d0c268c0764cfe4cf
f5577d3eb0aa37e912d4677dfa1af8e0e37aff49
5553f33d8736e4e562a117fbc7eecd527f8e6d7502b94c03df4649ad432d8b2b
GET /wp-content/uploads/2021/06/2-1.png HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 23 Jun 2021 12:55:06 GMT
accept-ranges: bytes
content-length: 14962
content-type: image/png
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/usuy-150x150.png
108.179.192.103200 OK 16 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/usuy-150x150.png
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash fdfbbeabafe3ffd49fb33d51893779be
a56a72e7b5d06f697533761a9143955e0b999213
6d563eec3cf5f83f3dc8a2729ecb714436f9b7adc1af99667d3a1858fe12aa99
GET /wp-content/uploads/2021/06/usuy-150x150.png HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Jun 2021 00:56:18 GMT
accept-ranges: bytes
content-length: 16352
content-type: image/png
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/3-1.png
108.179.192.103200 OK 22 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/3-1.png
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash 75e6b395dece160e0f6b3d4690e26f71
70ae01ffede9938b83e6a41504316c577b91b574
ac537e374a106b341f6ec07c34e412cd7bc6287c873836b3b824ad55ecfafca5
GET /wp-content/uploads/2021/06/3-1.png HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 23 Jun 2021 12:55:08 GMT
accept-ranges: bytes
content-length: 21584
content-type: image/png
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/4.png
108.179.192.103200 OK 21 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/4.png
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash 093a6cb6cf004952003ca4cf7dd870ea
e74164caa522fda3335db1a1fa637ed0a50d9821
84126f91c7ab16f5999cfe9876f46e3c3959ad26ac1b1dbe89d5fe2e16b0e572
GET /wp-content/uploads/2021/06/4.png HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 23 Jun 2021 12:55:11 GMT
accept-ranges: bytes
content-length: 21026
content-type: image/png
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/elementor/css/post-974.css?ver=1637337795
108.179.192.103200 OK 1.9 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/elementor/css/post-974.css?ver=1637337795
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5418)
Hash c14ed9cb5cdca5668179984c169e9871
11997fd567a14dc4f529269c86a84c0faf81d600
f07ef4e085189c52af81ae684d7683278f36b65b15cbf1ef8ec888ae23fbe371
GET /wp-content/uploads/elementor/css/post-974.css?ver=1637337795 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:03:15 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1897
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/wk_hotel-150x150.png
108.179.192.103200 OK 4.0 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/wk_hotel-150x150.png
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 150 x 150, 8-bit gray+alpha, non-interlaced\012- data
Hash b0d1b94ef66d9897dad527b2f36d77b2
430a074c31f330f66e22d6a1e80ea853421a986b
b36ae30f67ad23d8785a8b30f4ec998c54eb394b0c546d72c5db63e781aeaa11
GET /wp-content/uploads/2021/06/wk_hotel-150x150.png HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Jun 2021 00:55:19 GMT
accept-ranges: bytes
content-length: 3961
content-type: image/png
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
108.179.192.103200 OK 308 B URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (491)
Hash 851fd514d412b7e854365f20a4227c8a
08bf47072f70af1816450cc85a5efb3b8f9114d2
a9449e3cc7c003e5ed6b93bae7b0bba3e4f1713c52214f41d3591692a759b9d7
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 308
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
108.179.192.103200 OK 4.6 kB URL HTTP/2 lavesc.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Nov 2020 17:36:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/jacques_janine-150x150.png
108.179.192.103200 OK 9.0 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/jacques_janine-150x150.png
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash f39876bbe5ec8909dce2d0e2f208ad8d
66bfd03bdfca37b12e5cbf48900d5883945daf9c
abcd1ba3ef8bcc101a117af34bb45481cc5ba9f008b7f52d806e8e0b167de9cc
GET /wp-content/uploads/2021/06/jacques_janine-150x150.png HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Jun 2021 00:58:22 GMT
accept-ranges: bytes
content-length: 8979
content-type: image/png
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
108.179.192.103200 OK 308 B URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (489)
Hash 0a08469d24387f830bbaaa00b3c228ae
01f5dfeb8f93a32c9a8f66fe5940758109771fcd
3c7c29e5fc1193ff7ce24f72f77b2dc129e1a9434a97ef7b625f6f715531803c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 308
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.4.8
108.179.192.103200 OK 4.4 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.4.8
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (14869)
Hash 7bab7ad64ffbd7846dd6819250b93e2e
c924918d540389aff62220088b6761f38a5da272
045250efe67364c953a91f6a60cf407ebb5cfdb2da04e84c3d98e5bab5eca9ba
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.4.8 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4359
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.5
108.179.192.103200 OK 12 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.5
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (1646)
Hash e56098a703c5beb99abc9c3a870be594
76e54634e0628ab91310c760d619360151e26be1
0eb4438e57550f2c2a321d45a5cb1c92fb22d58f6dbcc9c189fc3bd1e4f78b8f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.5 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:13 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 11654
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
108.179.192.103200 OK 13 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (57726)
Hash dc63c0a8e2d5857cc7a00a4b5456dabb
ee29df5eb2a4bf3eb805b160551c1afd84b42599
035ef40b1dd3df1eefb2dd3c8c2096425727fb939b06f3aa0bc6ef91dafd5441
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12577
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.4.8
108.179.192.103200 OK 3.0 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.4.8
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10019)
Hash c2b5af6052f630a96e450e5e2a3cea52
00ca76a8828a1bbec1534eb10786804fd36492f2
58f6cc2d4fa3e528622102975fb62949dc0170bd47b588a67318d18552a57d59
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.4.8 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2997
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/themes/astra/assets/js/minified/style.min.js?ver=2.5.1
108.179.192.103200 OK 3.6 kB URL HTTP/2 lavesc.com.br/wp-content/themes/astra/assets/js/minified/style.min.js?ver=2.5.1
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10594), with no line terminators
Hash 5c244ddd3d5b81f943cc06bb3d39eae0
937bc56733f05985e8b6bad6e6ccd11e106c59eb
7f4883c7ab2bb307c921ae27ce4821017e907b8361b421883f61495c40cf9965
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/astra/assets/js/minified/style.min.js?ver=2.5.1 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 05 Aug 2020 21:20:15 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3642
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.6.5
108.179.192.103200 OK 6.1 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.6.5
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 80e63147618e29d1c94bba21050b6377
b1be250b2298529e37be473325a5fdac047c6fd1
c62666a62a13f25de7b53efefad9f1e4351adbb8dc577dee03c561ce503e0761
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.6.5 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:13 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6101
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.1
108.179.192.103200 OK 1.2 kB URL HTTP/2 lavesc.com.br/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.1
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3233)
Hash a801c7d8c18f01dd2ff3ddc44a436a2e
81986f97a21ba6770298714e78a31e4a2738ec96
b35572a36837b78d0629063d26127fc404a2447e55fea21c44e4dc75753fdcd3
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.1 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 09 Apr 2022 04:37:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1220
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-css/prettyphoto.min.css?ver=4.6.1
108.179.192.103200 OK 3.9 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-css/prettyphoto.min.css?ver=4.6.1
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (19729), with no line terminators
Hash adf480551672bbe7323f04b4d5493c39
e144c00368670f6b38957739a7a1eee58af43b7a
6447d2f9ef93fe7f773b154e48ec9141c31a935e065b8606c15956ac203cb436
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-css/prettyphoto.min.css?ver=4.6.1 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:06:07 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3901
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
108.179.192.103200 OK 3.7 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (12198), with no line terminators
Hash e2a8decccf4d0a6b925af707a36077a9
26a0febc9c3d91e75410f74b9ec62099ba1cbe90
09e0e638a6f53c0fdcfeeb8ae91f3a404bef47b471324e335e29be14a2aa87f7
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3747
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f97cde01f1afd5ed30319169445ec773
1cb25a8da62cdf1f9ab1b2b35d03163037691b33
1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DB2F13247D84BBEBF5221AC7429E9367EE92AA1148B4AA879751E1944766406"
Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2819
Expires: Mon, 10 Oct 2022 19:12:26 GMT
Date: Mon, 10 Oct 2022 18:25:27 GMT
Connection: keep-alive
lavesc.com.br/
108.179.192.103200 OK 56 kB IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (18076), with CRLF, LF line terminators
Hash 494f171016400996519246d3e2e7e26a
2783257b7a9536f8f04b988628a9e37f3b560200
a74bdc1574821183e8437503dae8209663b4eb43f34da8ba641d79e2d367e675
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 10 Oct 2022 18:25:26 GMT
server: Apache
content-type: text/html; charset=UTF-8
link: <https://lavesc.com.br/wp-json/>; rel="https://api.w.org/", <https://lavesc.com.br/wp-json/wp/v2/pages/2056>; rel="alternate"; type="application/json", <https://lavesc.com.br/>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
x-server-cache: true
x-proxy-cache: EXPIRED
X-Firefox-Spdy: h2
lavesc.com.br/wp-includes/js/imagesloaded.min.js?ver=4.1.4
108.179.192.103200 OK 2.1 kB URL HTTP/2 lavesc.com.br/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5477)
Hash f0bd7ad12acdee26cbb2701c1ba3610b
53c5d15129860868b60b74cb010b2c6050a64f69
e6d0cb19e56d22e8e511c23ca2bd233bedb40e3c7cf4ff38fe6f059bc7e0c64f
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Jun 2020 03:23:28 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2103
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.1
108.179.192.103200 OK 6.0 kB URL HTTP/2 lavesc.com.br/wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.1
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (18145)
Hash 7cab663e1bba2aed16ef447291e711ae
265073c829eae3ba24b7bee18cdf68ede5b2fc30
91f0b272f0f75e3b17cf933e5547d303b604e86dc07c9321ffc010c157386218
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/ui/draggable.min.js?ver=1.13.1 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 09 Apr 2022 04:37:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6011
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
108.179.192.103200 OK 8.2 kB URL HTTP/2 lavesc.com.br/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash a0a1c8194f131320e1798f90a7b1262a
3346d35be1f2e4886f19e7fcc0cc96ee4753d9ed
7f618ab13cec0933ec2c61fa2b580ad77ca41522028649677494219fa9ce56db
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 09 Apr 2022 04:37:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8169
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f97cde01f1afd5ed30319169445ec773
1cb25a8da62cdf1f9ab1b2b35d03163037691b33
1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DB2F13247D84BBEBF5221AC7429E9367EE92AA1148B4AA879751E1944766406"
Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2819
Expires: Mon, 10 Oct 2022 19:12:26 GMT
Date: Mon, 10 Oct 2022 18:25:27 GMT
Connection: keep-alive
lavesc.com.br/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.4.8
108.179.192.103200 OK 2.3 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.4.8
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4840)
Hash b66980cafa580a9d4a12c31c57118ea7
829845c0addbd1ad25526d4120be6b60f617cd07
aacb43e6925031ae3cffa9b8d8bd10eb0169e5dca5e171e962a31e1af2dcb8a8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.4.8 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2281
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.4.8
108.179.192.103200 OK 5.5 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.4.8
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (13963)
Hash 45b8a766b2c8d3b9e547d4dd16fd6d80
f3b7573d52d05e160801e33e92526d10543a9063
39b29280af84dcb71d672643c4f7e4991b99d44f6153e717355e81d8c9d2dd13
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.4.8 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5523
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f97cde01f1afd5ed30319169445ec773
1cb25a8da62cdf1f9ab1b2b35d03163037691b33
1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DB2F13247D84BBEBF5221AC7429E9367EE92AA1148B4AA879751E1944766406"
Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2819
Expires: Mon, 10 Oct 2022 19:12:26 GMT
Date: Mon, 10 Oct 2022 18:25:27 GMT
Connection: keep-alive
lavesc.com.br/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/prettyPhoto.min.js?ver=4.6.1
108.179.192.103200 OK 7.4 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/prettyPhoto.min.js?ver=4.6.1
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (22025), with no line terminators
Hash 4ba0f8a5750f6fcce21379bc67503248
5acd95f25fe69ce486856d64220b92c7db1173f6
a78417d478e0405a2b9b93d1782ac1e67c5f1cd7ebb3ca720ebbfff1f6ceb50a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/prettyPhoto.min.js?ver=4.6.1 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:06:07 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7412
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f97cde01f1afd5ed30319169445ec773
1cb25a8da62cdf1f9ab1b2b35d03163037691b33
1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DB2F13247D84BBEBF5221AC7429E9367EE92AA1148B4AA879751E1944766406"
Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2819
Expires: Mon, 10 Oct 2022 19:12:26 GMT
Date: Mon, 10 Oct 2022 18:25:27 GMT
Connection: keep-alive
lavesc.com.br/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.1.1
108.179.192.103200 OK 2.5 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.1.1
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5479)
Hash 7ab41bdbc64d7baec10a951ebd7e31e9
e8200c01c27f72f775b0dc69d2e7be21007d1541
5d1ac329d82420499941b41cd304ec7feb2eaac83ebd01871da3a675568891ed
GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.1.1 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 22:18:08 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2529
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.4.8
108.179.192.103200 OK 1.2 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.4.8
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2577)
Hash 159281ac01a46f042b38d0d44cf3eb7a
54677be6b1cf85899d2ab1a6fada531ca5613d29
0738d3f931e8df2b67f3be1ec216b103560266c56cc38fdafae055bcb807ffea
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.4.8 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1151
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1
108.179.192.103200 OK 4.3 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10725)
Hash 253da788125c58bc387c3db6cc404bad
6b90ddf84c234155eae1487d2f950ea079c2382c
12055a1176f887f9be83e2637de50ca41173101397cd42431d7c8df3e2757d6d
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4275
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3c21914-dac1-455d-9533-b584e9bd6225.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3c21914-dac1-455d-9533-b584e9bd6225.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cefb9479bc2fe5087f9d2b89ef3cec2b
aa219f193812c6a2d0313316ce13fe74f1d468d0
a806ef995ed2285bd9f0d553df49aa28924e640805e1f50284baad1c0aec06bd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3c21914-dac1-455d-9533-b584e9bd6225.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10113
x-amzn-requestid: 7a9800c5-81ed-4a23-bbe0-0041ab682856
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZwalQEPPoAMF3yA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63433e21-5a9bedb10c4f8c2c60ab3769;Sampled=0
x-amzn-remapped-date: Sun, 09 Oct 2022 21:33:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MROeeTPtb6DfMHkig6fHcYuYiv1-udvJVfB1jygcDYLy4LuZmgRE_Q==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Sun, 09 Oct 2022 22:24:52 GMT
age: 72035
etag: "aa219f193812c6a2d0313316ce13fe74f1d468d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.1.1
108.179.192.103200 OK 2.2 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.1.1
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6595), with no line terminators
Hash 2aa47e22e033b1a04cf09550d521033e
a0cf9de580a0eae9481906f97c1d6b38a0f8cf36
bda46e0dfe6c4c18bc8a9f9562a6e18e4261844d2d39ddcdb8b4c0160d267be7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.1.1 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 22:18:08 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2153
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F829a81b7-8a2b-4381-a830-9c534e3312fe.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F829a81b7-8a2b-4381-a830-9c534e3312fe.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2b15495e3e13c06fd0d67523870405ed
3cb8b43735e86c93733affa10818c47693c80fce
f65edddef18295076f79a48e9a6c95d07ed244a2ae618cb4229b6c1bd434cd57
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F829a81b7-8a2b-4381-a830-9c534e3312fe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12187
x-amzn-requestid: 9768886f-0e17-4958-bdaf-e17385eb21d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjqJCHyNoAMFmDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633e23d3-288e1d28057753a16893d6b5;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 00:39:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0FF6_I6Gw2Qn9KVlFuI0O-4-kWzoCWVlWE95_ckbwDEtS4bOHZJK0w==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 09 Oct 2022 22:25:25 GMT
age: 72002
etag: "3cb8b43735e86c93733affa10818c47693c80fce"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.4.8
108.179.192.103200 OK 12 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.4.8
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (32235)
Hash e5cdbcaff960643d2ef223dfad13aa14
9eb29551946eb603561743b563e727220e5a3c97
1898d26e537f983596f275f4a2766163343dbb400f80f8c7bb18aae0553c9535
GET /wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.4.8 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12187
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6039c6e-5a9f-4a9d-849d-21898de2959c.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6039c6e-5a9f-4a9d-849d-21898de2959c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8d7a8572ad0105c7ff6214fe742f1eec
8e4765e0c609a75e11824ab315ddb990f7a15676
8f7eaf1ad68eb1e1d88d3bb0661439957bf94b16efa3af85e13c2e41b8c985cd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6039c6e-5a9f-4a9d-849d-21898de2959c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6185
x-amzn-requestid: 0e6839d0-8e96-4961-974f-2e92ac51f02b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZwcL2GW2IAMFufQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634340b2-0bfa9c9208e302e055311d1c;Sampled=0
x-amzn-remapped-date: Sun, 09 Oct 2022 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 3c2fAGYXCvlk9gK9FUnqqMqZ8LdE-f_4KUGqCOMKpe3ZADDqkaZATg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 09 Oct 2022 22:00:25 GMT
age: 73502
etag: "8e4765e0c609a75e11824ab315ddb990f7a15676"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.4.8
108.179.192.103200 OK 14 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.4.8
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (36590)
Hash 0a5450e13974501a61e8b7df2fd580e1
cf930b7b54a35358f7281fffe313dc481cd3e35f
6c9b05bac11cf4d06b7f10037c4ab705d3f4480f870133b4eb7e393df2b12d8d
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.4.8 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14322
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d3fa05a-2c1d-4a1d-9d91-bc70cb4e4ee5.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d3fa05a-2c1d-4a1d-9d91-bc70cb4e4ee5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a09bd7160451852652bccbcbcdcbd527
f42137372ab3b592977b1b736c1b12fc5ed81bf6
568b1c7cbe260d05919ff7232855441f70bf048c32380d8c0b848aa80a1696c3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d3fa05a-2c1d-4a1d-9d91-bc70cb4e4ee5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6923
x-amzn-requestid: 507e5591-c06e-4ee8-b567-a11b6c95024e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZwalRGFcoAMFslw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63433e21-5e5bf5026b2121931e035270;Sampled=0
x-amzn-remapped-date: Sun, 09 Oct 2022 21:33:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EgQIb89afJS1uPY9ZUyDS_E7C_JQT8Scm3EC3K5OZKB2nE7wMx8PIw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 09 Oct 2022 22:12:34 GMT
age: 72773
etag: "f42137372ab3b592977b1b736c1b12fc5ed81bf6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f97cde01f1afd5ed30319169445ec773
1cb25a8da62cdf1f9ab1b2b35d03163037691b33
1db2f13247d84bbebf5221ac7429e9367ee92aa1148b4aa879751e1944766406
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DB2F13247D84BBEBF5221AC7429E9367EE92AA1148B4AA879751E1944766406"
Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2819
Expires: Mon, 10 Oct 2022 19:12:26 GMT
Date: Mon, 10 Oct 2022 18:25:27 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fddaf1070-ebad-430c-b856-6b6704ae51dd.jpeg
34.120.237.76200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fddaf1070-ebad-430c-b856-6b6704ae51dd.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7b2bd332e22751757c71b82b703f167e
5150043db72276380d5b265760112c05c233b873
18d961e14c5be703efce24f0e94ad4e046ad28b49325fdf22b5445fd24baf58d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fddaf1070-ebad-430c-b856-6b6704ae51dd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6533
x-amzn-requestid: 56d11966-2442-410b-9c4f-eed2a3bf0d5d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZwatMEpwoAMF1aA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63433e54-50740bf0455199093d849abe;Sampled=0
x-amzn-remapped-date: Sun, 09 Oct 2022 21:34:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: bF5vJ0uF9J5J9ZUQ1vteSfu3DVq2QxZEGFvRZKYMyGaCCZ3RU0Essg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 09 Oct 2022 21:57:03 GMT
age: 73704
etag: "5150043db72276380d5b265760112c05c233b873"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b12fb41-30af-4093-a2e5-407e0dba7f9f.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b12fb41-30af-4093-a2e5-407e0dba7f9f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3cb1e1243af4405d2ddfc86ece266cff
bcd47a41fc6b0384c03fa00b8fa4a23805fa3b28
6df8b3b5420bad300304d14e8e18d65e4179a76d2f7e0a24bce23655318f49a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b12fb41-30af-4093-a2e5-407e0dba7f9f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8218
x-amzn-requestid: 694a656a-0f68-4d3a-a316-1da1ce908c11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZwatMFwzoAMF4Ew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63433e54-277be490531f4d3b4cf11540;Sampled=0
x-amzn-remapped-date: Sun, 09 Oct 2022 21:34:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: bQ8XleDVmNo8uFPqs6hSr55SYWa4yF2R4nZ_oMnObdl3PlTGM7l7Dg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sun, 09 Oct 2022 22:02:57 GMT
etag: "bcd47a41fc6b0384c03fa00b8fa4a23805fa3b28"
content-type: image/jpeg
age: 73350
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 43141c37657b2dc617dc65bfe97a865c
df200056afa06387a505aac1d8098c6675356ba9
e9e99ad50877b82025b812718da985f84e52654af4b62244ca3a162c2da17cc4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lavesc.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
108.179.192.103200 OK 40 kB URL HTTP/2 lavesc.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash e25a390669937cd2753a02daf7af5e5d
404a65b97e4452f3b9408235650d15d443e4f95f
776d909eba6a7bf7a40761afc3a849a16eceffbb3cd1bbd58dc17a158d2dfc66
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 10 Mar 2021 23:37:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 29a32d9388903ec730ac67b6b1f10269
6d54710f2bf0b284533005d8c783f3f15c9920af
cd03b8d5ae307fb1b3d976457c9762a743d5268ddd1f82c1fb5ae2fcd3e3d6d1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash d86e14ff3ce5350e8b876fa551583c57
f5d6a4f4a7da1e11bc5bebd89a1fe6f3ac60cb30
6db523ab57767f22ee6cebc4050b55f11ffc9937ad3868c63090df084cc9a7b7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2
216.58.207.195200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 12860, version 1.0\012- data
Hash ab21c24efd75543e16e34807ebc6cdec
eb2562f9729079333fbcbbe94868695669dd3301
88f00438d26021a325247c4427898f7c778a22976df9f1a9d9876429778bf265
GET /s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lavesc.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Oct 2022 21:03:13 GMT
expires: Tue, 03 Oct 2023 21:03:13 GMT
cache-control: public, max-age=31536000
age: 595334
last-modified: Mon, 09 May 2022 18:27:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
108.179.192.103200 OK 48 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash e4b1ef704886cac9cc4ec78446b29b04
15da95edf7635a3d05f3d3f08a75eb49992e3407
d0e02603e1a7f2cbae061904077745a6f363a95547413c4b2b786d9a11f63ae6
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash d86e14ff3ce5350e8b876fa551583c57
f5d6a4f4a7da1e11bc5bebd89a1fe6f3ac60cb30
6db523ab57767f22ee6cebc4050b55f11ffc9937ad3868c63090df084cc9a7b7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-N4LDZ84
142.250.74.168200 OK 59 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-N4LDZ84
IP 142.250.74.168:0
File type ASCII text, with very long lines (4544)
Hash 30f4f0d24f92cdbc274c0b7ef85a2637
42988bf9b87a81907b743bdb584ee207392f1a89
a80c965870588cc0b45f54c0969f4c6737b65553687282dba3bd61b4760ad0b2
GET /gtm.js?id=GTM-N4LDZ84 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 10 Oct 2022 18:25:27 GMT
expires: Mon, 10 Oct 2022 18:25:27 GMT
cache-control: private, max-age=900
last-modified: Mon, 10 Oct 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 59105
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.1.1
108.179.192.103200 OK 74 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.1.1
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 4a0da782c272d0c2924da4c44e3bda09
817ffd3d0528ebbd02a458fb9ad1b5fe5aaa2677
6b68756a4563fa8d3125b1cd478689dfa3c620214de2687bec232520cbe877e5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.1.1 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 22:18:08 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2
216.58.207.195200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 12848, version 1.0\012- data
Hash f0b3206d02a2f684530117ce1d7e8ce0
f3708b707b65e241b0f1c819d5f7bf7da8412653
f31b80562610135edd91a86ec7f243c5eeaec2ec08337e6a20c2d135d8e217da
GET /s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lavesc.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12848
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Oct 2022 16:43:30 GMT
expires: Fri, 06 Oct 2023 16:43:30 GMT
cache-control: public, max-age=31536000
age: 351717
last-modified: Mon, 11 Jul 2022 18:56:00 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_delivery.jpg
108.179.192.103200 OK 215 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_delivery.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 56x56, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 215 kB (215433 bytes)
Hash 3d6b3bdeab31488bb01719566b11c146
d2eb1f0e53f5cc5fb19121d53feff05eee712457
27612ddf1d63ab358b6df41b7be9aa97aaa5f922946cd2249318fb310cc6fc11
GET /wp-content/uploads/2021/06/banner_delivery.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/wp-content/uploads/elementor/css/post-2056.css?ver=1652910247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Jun 2021 00:07:33 GMT
accept-ranges: bytes
content-length: 215433
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 43141c37657b2dc617dc65bfe97a865c
df200056afa06387a505aac1d8098c6675356ba9
e9e99ad50877b82025b812718da985f84e52654af4b62244ca3a162c2da17cc4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
108.179.192.103200 OK 77 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data
Hash f7307680c7fe85959f3ecf122493ea7d
fce0da592a3e536d6d5df5b50cb513398d8c5161
43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
content-length: 76764
content-type: font/woff2
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
108.179.192.103200 OK 78 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://lavesc.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
content-length: 78196
content-type: font/woff2
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0
108.179.192.103200 OK 92 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 91472, version 1.0\012- data
Hash f4f91f34f5cd97cb1fb1ff9de8cb1473
56eefd5e8875fd3a639a2e4c884f880fd1829525
3368bde807b9dc25e071e9d50a7f698b8788e5b12b7a967dd1efcffb8cc957ab
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
content-length: 91472
content-type: font/woff2
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 29a32d9388903ec730ac67b6b1f10269
6d54710f2bf0b284533005d8c783f3f15c9920af
cd03b8d5ae307fb1b3d976457c9762a743d5268ddd1f82c1fb5ae2fcd3e3d6d1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lavesc.com.br/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-css/premium-addons.min.css?ver=4.6.1
108.179.192.103200 OK 47 kB URL HTTP/2 lavesc.com.br/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-css/premium-addons.min.css?ver=4.6.1
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 54b303d26dd5f4174306697b366a4a04
a8a72f72bd76cb37ff3c354e32e59654052846bd
037188e7e5c9f34d303d76e2ad77434e9def764ffd40bdf29adc931fff39d8bd
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-css/premium-addons.min.css?ver=4.6.1 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:06:07 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 5855dca2f41651669a3211635c24ce5a
3f17ede289a3ac814e80a0acefbcd97246ab51de
ca400e5e49929039d4382b1ce2defadc76d86b5756fac8dbaa6d237d5ef1699c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 78a3ee88876e1d435a7336de2648d41f
96ec618e5f3e76bdbc03e4e60a793ec396b40dd3
4eab0c4746253e517a0523b2e47d6d392c5e17e663ac59307182a566f31d86e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lavesc.com.br/wp-content/uploads/2021/06/2-1024x337.png
108.179.192.103200 OK 48 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/2-1024x337.png
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 1024 x 337, 8-bit/color RGBA, non-interlaced\012- data
Hash 53628a6395c0aa60343d92b0ae724ca3
0f310984701406b47ba94dab8145e4f028cd0973
19e1ccb62e802e28e529c8c95bc3191a6b6ff8c440c52eaca77f89d8bafe8153
GET /wp-content/uploads/2021/06/2-1024x337.png HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Jun 2021 01:10:07 GMT
accept-ranges: bytes
content-length: 47497
content-type: image/png
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Noto+Sans%3A400%2C700%7CMontserrat%3A700%2C&display=fallback&ver=2.5.1
142.250.74.10200 OK 98 kB URL HTTP/2 fonts.googleapis.com/css?family=Noto+Sans%3A400%2C700%7CMontserrat%3A700%2C&display=fallback&ver=2.5.1
IP 142.250.74.10:0
Hash 88ef7979de5a30e6169a18ad201fdb0f
3abb46b23aeed51f8672f6df2109361259b5ff54
dbbea03c1a502feca6cbdc5e47480e123b7e3e5905e25620b0fd8b1ac7ce306c
GET /css?family=Noto+Sans%3A400%2C700%7CMontserrat%3A700%2C&display=fallback&ver=2.5.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 10 Oct 2022 18:25:27 GMT
date: Mon, 10 Oct 2022 18:25:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/Miniolla.ttf
108.179.192.103200 OK 71 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/Miniolla.ttf
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type TrueType Font data, digitally signed, 17 tables, 1st "DSIG", 16 names, Macintosh, LEMON STUDIO | 2019MiniollaRegularVersion 1.000;;Miniolla-Regular;2019;FLVI-614Miniolla RegularV\012- data
Hash fcde9be2cfa2e7dcee3abcd17e135f52
e5663f6b6c6d1ffe0d91d8f145d242365fd3498d
a8ed51d7ef65a92a19371308e4e547196cbd24a076c78f3791ba3cf06def81e5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2021/06/Miniolla.ttf HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/wp-content/uploads/elementor/css/post-2056.css?ver=1652910247
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
content-type: font/ttf
content-length: 70904
last-modified: Thu, 10 Jun 2021 02:01:46 GMT
x-server-cache: true
x-proxy-cache: EXPIRED
accept-ranges: bytes
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_roupasdecama.jpg
108.179.192.103200 OK 180 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_roupasdecama.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 180 kB (180347 bytes)
Hash ef1b2edcd446863034e5d2df4f07941b
efc277ade662dd3f16b9370f5ad90671c34d75ac
075e0f91bff65a15d8bb03d581f8fc95ef704778393aa2d96ea5840dc8cf34bd
GET /wp-content/uploads/2021/06/banner_roupasdecama.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 23:48:44 GMT
accept-ranges: bytes
content-length: 180347
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_cortinas.jpg
108.179.192.103200 OK 195 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_cortinas.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 195 kB (194795 bytes)
Hash c0ca61bff49f94a73ab6cea78ba59a1c
4bfdfbadca40b0cca3b81c9df2240f4174ce7856
0d702862500124ad1258a8cbd3e0008e92e06c610aa9481d70d1fa80600b91c7
GET /wp-content/uploads/2021/06/banner_cortinas.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 23:49:04 GMT
accept-ranges: bytes
content-length: 194795
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_esportivos.jpg
108.179.192.103200 OK 181 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_esportivos.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 181 kB (180759 bytes)
Hash 2815533f1007af1b20c52df1319b2c06
86ef01255a69df4d8d88de93fb9aa8615f3fe36a
165fe629037084005fd5f5b9569455427e71f58fff72601df57466bb7433f626
GET /wp-content/uploads/2021/06/banner_esportivos.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 23:39:28 GMT
accept-ranges: bytes
content-length: 180759
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_bolsas.jpg
108.179.192.103200 OK 202 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_bolsas.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 202 kB (202408 bytes)
Hash e95550803b972cb1cf061fdddf59e822
45e240782e3a146710b1ddf6231b3d109c7bcdfe
bdc98d0ac64c0285ba2d1361f2f960849caf8520c19942df84532e3b3feaaa6b
GET /wp-content/uploads/2021/06/banner_bolsas.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 23:39:05 GMT
accept-ranges: bytes
content-length: 202408
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_kids.jpg
108.179.192.103200 OK 207 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_kids.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 207 kB (207266 bytes)
Hash 1deebf8b6d8b34526f6cf7f2053757d0
637c4ebb03250546e4b4eb6e62519158a928fe04
8bd4c98b135d039beeadafa2e1768809fca1670c7e2bc53d084a6b9d80001706
GET /wp-content/uploads/2021/06/banner_kids.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 23:38:54 GMT
accept-ranges: bytes
content-length: 207266
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_casacos.jpg
108.179.192.103200 OK 208 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_casacos.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 208 kB (208533 bytes)
Hash b3c526558c5686cbe82899023f8d62a8
5788597febc9bff37d6d833f120046bc553184d5
064332f51e836530582a2ba27ff43f00651fef3cd7bec19cbdc39e372de29585
GET /wp-content/uploads/2021/06/banner_casacos.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 23:39:24 GMT
accept-ranges: bytes
content-length: 208533
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_sapatos.jpg
108.179.192.103200 OK 223 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_sapatos.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 223 kB (222564 bytes)
Hash 2f52b7d2523926cfe87fb003bfa7b33b
bb8bc1471dbf2a104819bc58a27311b6d884dcac
f5622513f4f4e16aead49c1ac853cd817fe69acc5d36a01e35bb51da35e7eea0
GET /wp-content/uploads/2021/06/banner_sapatos.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 23:38:58 GMT
accept-ranges: bytes
content-length: 222564
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_jaleco.jpg
108.179.192.103200 OK 228 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_jaleco.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 228 kB (228358 bytes)
Hash e1f568038abd08190d67362dfeeaf6a5
a2da5d31cc2bd827bcdd81e7eda21614c79f5c97
5edec29df494aeecff4ce12954c16c554bb87f94dbb08143d38710ecd693587f
GET /wp-content/uploads/2021/06/banner_jaleco.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Jun 2021 03:24:03 GMT
accept-ranges: bytes
content-length: 228358
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_camisa.jpg
108.179.192.103200 OK 234 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_camisa.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 234 kB (234491 bytes)
Hash 272a63f5e78b935109c412d4a9ed9e0f
732d0627612c4be0e9b33dddf41cb6ea8f4253a2
7ee2e2fa20fbaff9fe501c404ce607001539234717d8af163a3dfd648ff362f8
GET /wp-content/uploads/2021/06/banner_camisa.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 23:23:54 GMT
accept-ranges: bytes
content-length: 234491
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_dia-a-dia.jpg
108.179.192.103200 OK 240 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_dia-a-dia.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 240 kB (240084 bytes)
Hash c33289e2620e8003c76f67a6ce87bd5a
54d8d0c9acfb7e20fe22eab290ae9d4c3b1568be
fc67617c0a149b6d1a1ddf21edca80f0a46908efb8955b7db68543aa2c23ae38
GET /wp-content/uploads/2021/06/banner_dia-a-dia.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 23:39:09 GMT
accept-ranges: bytes
content-length: 240084
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_ternos.jpg
108.179.192.103200 OK 245 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_ternos.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 245 kB (245427 bytes)
Hash 3e29a8942b1f5aad4b27823b4b29bb30
bd1c8c6b5bd4c124c1bcd34779d8fee3ab795c14
1b3e161ac09e6e37a53076c6b3477c80cf25e42e4cfb8128be0bcfa60817af65
GET /wp-content/uploads/2021/06/banner_ternos.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 23:39:18 GMT
accept-ranges: bytes
content-length: 245427
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_uniformes.jpg
108.179.192.103200 OK 232 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_uniformes.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 232 kB (231465 bytes)
Hash 7d6a1032909e7e140077505d5f97b31e
3e5be1f747eb517d275145045f754e84a8d1346e
04fe7cd956c24613d2f10ea138f6d5a2ea032418ebde95832d35bed24fffeb89
GET /wp-content/uploads/2021/06/banner_uniformes.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Jun 2021 03:24:07 GMT
accept-ranges: bytes
content-length: 231465
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_toalhas.jpg
108.179.192.103200 OK 237 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_toalhas.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 237 kB (237163 bytes)
Hash a5143432e95c68eaa21fa229b269418b
8dd84bc9fd0f51af737f6852a6cec0d19998fe70
d357ef1530394afebf5f4de0c76bc743764fc68330a2824759d61e65893e9eb9
GET /wp-content/uploads/2021/06/banner_toalhas.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 23:49:08 GMT
accept-ranges: bytes
content-length: 237163
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_tapetes.jpg
108.179.192.103200 OK 239 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_tapetes.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 239 kB (239170 bytes)
Hash 0fae605785c84def8aaa436b4dd406a0
e3ccaf42b1d04224ca12c6ac8a5cef93561f17d8
72c40a3994ce3658b5721d3ef766fef6816d679bcd2871b7ed55f7d2b2b50f33
GET /wp-content/uploads/2021/06/banner_tapetes.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 23:48:58 GMT
accept-ranges: bytes
content-length: 239170
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_edredom2.jpg
108.179.192.103200 OK 247 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_edredom2.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 247 kB (247229 bytes)
Hash dde37d5d3b329296ecf6f311bef14677
2cfc728eb47bc615521c16054e4189c7c3fbdc66
6cc65f8ea11201a70038f1587a23cad4b5f214d95db015cc151875fdb2a63e04
GET /wp-content/uploads/2021/06/banner_edredom2.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Jun 2021 03:17:50 GMT
accept-ranges: bytes
content-length: 247229
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
www.google.com/pagead/conversion_async.js
142.250.74.164200 OK 15 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP 142.250.74.164:0
File type ASCII text, with very long lines (1654)
Hash 8766c5a801f08afceca9b66ff9097e6a
ce7640d1d166eddeb9d40be642ec34652f790713
f448f99b4ad9a9b50daa9c38054cf16ab2b9fcb5d83ddad60571fb6a8a432a99
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Mon, 10 Oct 2022 18:25:28 GMT
expires: Mon, 10 Oct 2022 18:25:28 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 17557423932572341828
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 378dd54ac5b879c8be58a38bf554668a
b2bc7911616e2f8177baf2f26d80966a144ede82
e8dd7fed9d6066748e4b39e79871dc75d824064a40b736684df8131fd6b2a8ed
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6135
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:28 GMT
Last-Modified: Mon, 10 Oct 2022 16:43:13 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
www.google.com/maps/embed?origin=mfe&pb=!1m4!2m1!1sav+professor+othon+gama+d%27e%C3%A7a+900+-+Loja+13!5e0!6i15
142.250.74.164200 OK 966 B URL HTTP/2 www.google.com/maps/embed?origin=mfe&pb=!1m4!2m1!1sav+professor+othon+gama+d%27e%C3%A7a+900+-+Loja+13!5e0!6i15
IP 142.250.74.164:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1719)
Hash 8e7e7c812a8e2ba8eb34246acce66892
3f63f25bcb95cef4edb78ff6345da9ea10f6b82c
4c814f0226b895c19a53070bcf86a162941d3ccf71042241dfef37994dcf70b2
GET /maps/embed?origin=mfe&pb=!1m4!2m1!1sav+professor+othon+gama+d%27e%C3%A7a+900+-+Loja+13!5e0!6i15 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lavesc.com.br/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Mon, 10 Oct 2022 18:25:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
vary: Accept-Language
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-fF6sYvRJUG4mA_qio20o-A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
content-encoding: gzip
server: mafe
content-length: 966
x-xss-protection: 0
server-timing: gfet4t7; dur=483
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 10 Oct 2022 16:41:09 GMT
expires: Mon, 10 Oct 2022 18:41:09 GMT
cache-control: public, max-age=7200
age: 6259
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash e1327a02d76346c7e23d114e4e508b30
195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: PgYEMq4mPJBLL0nwt3O3Q2rMgKnD60kryBNig02i9NwhTlJJ2F/ug9RUHcRqV+7IDwBa77fwvp2almemSKVz0g==
content-length: 26840
x-fb-trip-id: 1904183273
date: Mon, 10 Oct 2022 18:25:28 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash dd948efc72c1cdc7fa4f691d9db79692
8dc8599f9b1ba1274b3f89e0ed5e331ba758b2b8
d04382223f7d4b784af062d0a88fb70e96fdeab51d1e21d23a59212c5c9853ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/gtm/optimize.js?id=UA-59743207-2
142.250.74.174404 Not Found 1.6 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=UA-59743207-2
IP 142.250.74.174:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 13f8c30597218bab1ecb14704e614c6d
0dbacd4aea6eea6abcebdc5c4b2319cdd2d870b4
b8dae74c17b62b7765069bdc0979e7a978746751bee7414bc746b201a6613ee8
GET /gtm/optimize.js?id=UA-59743207-2 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
date: Mon, 10 Oct 2022 18:25:28 GMT
content-type: text/html; charset=UTF-8
server: Google Tag Manager
content-length: 1593
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-73D20H4F6Z&cid=1187783785.1665426328>m=2oea50&aip=1&z=1422000746
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-73D20H4F6Z&cid=1187783785.1665426328>m=2oea50&aip=1&z=1422000746
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-73D20H4F6Z&cid=1187783785.1665426328>m=2oea50&aip=1&z=1422000746 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 10 Oct 2022 18:25:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 378dd54ac5b879c8be58a38bf554668a
b2bc7911616e2f8177baf2f26d80966a144ede82
e8dd7fed9d6066748e4b39e79871dc75d824064a40b736684df8131fd6b2a8ed
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6135
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:28 GMT
Last-Modified: Mon, 10 Oct 2022 16:43:13 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
lavesc.com.br/wp-content/uploads/2021/06/cropped-LAVESC-LOGO-1-192x192.png
108.179.192.103200 OK 7.4 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/cropped-LAVESC-LOGO-1-192x192.png
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash ac35e1c5cde50becabf8897cf346f352
98e9be014ea5df2427540b17bfe0dd7f27ed16b7
63bd67e15e988ba8f9a5c99a0086845e6c5ef18b4e8ec6cdd3188855fc58c3fc
GET /wp-content/uploads/2021/06/cropped-LAVESC-LOGO-1-192x192.png HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Cookie: _gcl_au=1.1.573474758.1665426328; _ga_73D20H4F6Z=GS1.1.1665426328.1.0.1665426328.60.0.0; _ga=GA1.1.1187783785.1665426328
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Jun 2021 03:42:48 GMT
accept-ranges: bytes
content-length: 7350
content-type: image/png
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/cropped-LAVESC-LOGO-1-32x32.png
108.179.192.103200 OK 1.3 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/cropped-LAVESC-LOGO-1-32x32.png
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 57bb96de453740793907219b1072b9de
3fed8e8b032d5e599968b9352e4a3249fafe4bac
d73803402c9c17273ad38189a38d0aa036d639e508d0c9ddf5babe2fc0aae565
GET /wp-content/uploads/2021/06/cropped-LAVESC-LOGO-1-32x32.png HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Cookie: _gcl_au=1.1.573474758.1665426328; _ga_73D20H4F6Z=GS1.1.1665426328.1.0.1665426328.60.0.0; _ga=GA1.1.1187783785.1665426328
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Jun 2021 03:42:48 GMT
accept-ranges: bytes
content-length: 1348
content-type: image/png
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 29b850f78eff032c2e6d30896fa615c3
9be0f4fe829e9395573cfb0753bbe4853d9a4dc4
bdd66f2c7e5e0addf04ca580557703349bb24477dd39e7df9d213a6aca350ea3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 29b850f78eff032c2e6d30896fa615c3
9be0f4fe829e9395573cfb0753bbe4853d9a4dc4
bdd66f2c7e5e0addf04ca580557703349bb24477dd39e7df9d213a6aca350ea3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash dd948efc72c1cdc7fa4f691d9db79692
8dc8599f9b1ba1274b3f89e0ed5e331ba758b2b8
d04382223f7d4b784af062d0a88fb70e96fdeab51d1e21d23a59212c5c9853ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/965472442/?random=1665426328469&cv=9&fst=1665426328469&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga50&sendb=1&ig=0&frm=0&url=https%3A%2F%2Flavesc.com.br%2F&tiba=Lavesc%20Lavanderia%20%E2%80%93%20Roupas%20limpas%20%26%20Tempo%20livre&auid=573474758.1665426328&hn=www.google.com&async=1&rfmt=3&fmt=4
216.58.207.194200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/965472442/?random=1665426328469&cv=9&fst=1665426328469&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga50&sendb=1&ig=0&frm=0&url=https%3A%2F%2Flavesc.com.br%2F&tiba=Lavesc%20Lavanderia%20%E2%80%93%20Roupas%20limpas%20%26%20Tempo%20livre&auid=573474758.1665426328&hn=www.google.com&async=1&rfmt=3&fmt=4
IP 216.58.207.194:0
File type ASCII text, with very long lines (2268), with no line terminators
Hash f578457c31b22d8586f5abf99367ca84
d4b15bdfe0c7993f4505274256be25db97ca046e
cc6d89bec605adac16266f7d35bac19724090062b2d6cc5d52f1529300ab7e82
GET /pagead/viewthroughconversion/965472442/?random=1665426328469&cv=9&fst=1665426328469&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga50&sendb=1&ig=0&frm=0&url=https%3A%2F%2Flavesc.com.br%2F&tiba=Lavesc%20Lavanderia%20%E2%80%93%20Roupas%20limpas%20%26%20Tempo%20livre&auid=573474758.1665426328&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 10 Oct 2022 18:25:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1036
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 10-Oct-2022 18:40:28 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/https%3A/?random=1665426328465&cv=9&fst=1665426328465&num=1&label=%2Flavesc.com.br%2F&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga50&sendb=1&ig=0&frm=0&url=https%3A%2F%2Flavesc.com.br%2F&tiba=Lavesc%20Lavanderia%20%E2%80%93%20Roupas%20limpas%20%26%20Tempo%20livre&auid=573474758.1665426328&hn=www.google.com&async=1&rfmt=3&fmt=4
216.58.207.194200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/https%3A/?random=1665426328465&cv=9&fst=1665426328465&num=1&label=%2Flavesc.com.br%2F&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga50&sendb=1&ig=0&frm=0&url=https%3A%2F%2Flavesc.com.br%2F&tiba=Lavesc%20Lavanderia%20%E2%80%93%20Roupas%20limpas%20%26%20Tempo%20livre&auid=573474758.1665426328&hn=www.google.com&async=1&rfmt=3&fmt=4
IP 216.58.207.194:0
File type ASCII text, with very long lines (2354), with no line terminators
Hash dba30ed9a861ffcc3c3c6197ffa6fa3a
d836fa49f4f17f721d271f6458436d4750112755
3b9d1a51f44170203a96f82ab100d9f56e86f4f8a6aa0da248d58bc4721631ac
GET /pagead/viewthroughconversion/https%3A/?random=1665426328465&cv=9&fst=1665426328465&num=1&label=%2Flavesc.com.br%2F&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga50&sendb=1&ig=0&frm=0&url=https%3A%2F%2Flavesc.com.br%2F&tiba=Lavesc%20Lavanderia%20%E2%80%93%20Roupas%20limpas%20%26%20Tempo%20livre&auid=573474758.1665426328&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 10 Oct 2022 18:25:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1058
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 10-Oct-2022 18:40:28 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad
142.250.74.138200 OK 57 kB URL HTTP/2 maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad
IP 142.250.74.138:0
File type ASCII text, with very long lines (2468)
Hash 7ef73c51d0f35afa1c81351c9334485c
a7bfc0e72c175929a02e8149458d7db03e106567
33559d3aaef82c606bd0d34ebe6fdbd8b2cb9f81bf73f7d47e742aad2430573a
GET /maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 56574
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=13
date: Mon, 10 Oct 2022 18:19:17 GMT
expires: Mon, 10 Oct 2022 18:49:17 GMT
cache-control: public, max-age=1800
content-type: text/javascript; charset=UTF-8
age: 371
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 29b850f78eff032c2e6d30896fa615c3
9be0f4fe829e9395573cfb0753bbe4853d9a4dc4
bdd66f2c7e5e0addf04ca580557703349bb24477dd39e7df9d213a6aca350ea3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 10 Oct 2022 18:25:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
142.250.74.138200 OK 23 B URL HTTP/2 maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
IP 142.250.74.138:0
File type JSON data\012- , ASCII text
Hash e3981ca10169a319d5aa062bf43a5fa1
2c6ed584767b65688ce99b1ebe1a3b7448a67421
8b0b8749aba12de93f3cf5d86f9fac9d6de7cac400a17473718f182a34ebb7e9
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 10 Oct 2022 18:25:28 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.google.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maps.gstatic.com/maps-api-v3/embed/js/50/8/init_embed.js
142.250.74.163200 OK 69 kB URL HTTP/2 maps.gstatic.com/maps-api-v3/embed/js/50/8/init_embed.js
IP 142.250.74.163:0
File type ASCII text, with very long lines (2669)
Hash 138be41e120e3cc80ab8eb02a2607f96
6fd6da61dbb2ff9d894ba9bcd1c5b3b3ccf36f71
f13fe4c3fd6b55f59ccf0ce2a234043203e9ebdf92c097ba81dff2fb3d4c1393
GET /maps-api-v3/embed/js/50/8/init_embed.js HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 68697
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 16:37:59 GMT
expires: Thu, 05 Oct 2023 16:37:59 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 03 Oct 2022 19:56:10 GMT
content-type: text/javascript
age: 438449
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-73D20H4F6Z>m=2oea50&_p=1754684683&_gaz=1&cid=1187783785.1665426328&ul=en-us&sr=1280x1024&_s=1&sid=1665426328&sct=1&seg=0&dl=https%3A%2F%2Flavesc.com.br%2F&dt=Lavesc%20Lavanderia%20%E2%80%93%20Roupas%20limpas%20%26%20Tempo%20livre&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-73D20H4F6Z>m=2oea50&_p=1754684683&_gaz=1&cid=1187783785.1665426328&ul=en-us&sr=1280x1024&_s=1&sid=1665426328&sct=1&seg=0&dl=https%3A%2F%2Flavesc.com.br%2F&dt=Lavesc%20Lavanderia%20%E2%80%93%20Roupas%20limpas%20%26%20Tempo%20livre&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-73D20H4F6Z>m=2oea50&_p=1754684683&_gaz=1&cid=1187783785.1665426328&ul=en-us&sr=1280x1024&_s=1&sid=1665426328&sct=1&seg=0&dl=https%3A%2F%2Flavesc.com.br%2F&dt=Lavesc%20Lavanderia%20%E2%80%93%20Roupas%20limpas%20%26%20Tempo%20livre&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lavesc.com.br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://lavesc.com.br
date: Mon, 10 Oct 2022 18:25:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-73D20H4F6Z&cid=1187783785.1665426328>m=2oea50&aip=1
173.194.73.154204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-73D20H4F6Z&cid=1187783785.1665426328>m=2oea50&aip=1
IP 173.194.73.154:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-73D20H4F6Z&cid=1187783785.1665426328>m=2oea50&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lavesc.com.br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://lavesc.com.br
date: Mon, 10 Oct 2022 18:25:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_toalhas-salao.jpg
108.179.192.103200 OK 236 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_toalhas-salao.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 236 kB (235754 bytes)
Hash 89e4391222adefa9d61a220f4a7cf95f
985d07f4cbf3db87f1f58fefcaccc524becd9d3b
9ab0337585b72de07a99761b8eaff8ecafc6e2551a9fbd43fe004910a6c46a8e
GET /wp-content/uploads/2021/06/banner_toalhas-salao.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Cookie: _gcl_au=1.1.573474758.1665426328; _ga_73D20H4F6Z=GS1.1.1665426328.1.0.1665426328.60.0.0; _ga=GA1.3.1187783785.1665426328; _gid=GA1.3.1066129420.1665426329; _gat_UA-59743207-2=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Jun 2021 03:24:20 GMT
accept-ranges: bytes
content-length: 235754
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_lenc%CC%A7ois.jpg
108.179.192.103200 OK 230 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_lenc%CC%A7ois.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 230 kB (230208 bytes)
Hash 1c585b9a621b66517822b02c252021b8
d61901764f478001fe8e56aea280efdc9eddf0cb
5f7650bbf08b1ab9345c34f51bc00d0ba56d9c5b93a678d99aa329c81d59a499
GET /wp-content/uploads/2021/06/banner_lenc%CC%A7ois.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Cookie: _gcl_au=1.1.573474758.1665426328; _ga_73D20H4F6Z=GS1.1.1665426328.1.0.1665426328.60.0.0; _ga=GA1.3.1187783785.1665426328; _gid=GA1.3.1066129420.1665426329; _gat_UA-59743207-2=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Jun 2021 03:24:16 GMT
accept-ranges: bytes
content-length: 230208
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_touca.jpg
108.179.192.103200 OK 236 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_touca.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 236 kB (235785 bytes)
Hash 4941add5caf8bd576e652b937570735f
8c33839ee51f182143a5e0a4e70225264212540e
764e893c782ddda5f0a98d2c030b617990fcdec9e1081348c2bc2e16ac3bfcae
GET /wp-content/uploads/2021/06/banner_touca.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Cookie: _gcl_au=1.1.573474758.1665426328; _ga_73D20H4F6Z=GS1.1.1665426328.1.0.1665426328.60.0.0; _ga=GA1.3.1187783785.1665426328; _gid=GA1.3.1066129420.1665426329; _gat_UA-59743207-2=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Jun 2021 03:24:25 GMT
accept-ranges: bytes
content-length: 235785
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/banner_avental.jpg
108.179.192.103200 OK 232 kB URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/banner_avental.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 1280x960, components 3\012- data
Size 232 kB (232002 bytes)
Hash 48831ea84b4eeacecef2458cfb325ff4
ce9706b293092cb42be494f64ca9a7e2d967c55d
0adc22fde328ef723c244c34bef9434580944e07cdf231145809a9633912cc82
GET /wp-content/uploads/2021/06/banner_avental.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Cookie: _gcl_au=1.1.573474758.1665426328; _ga_73D20H4F6Z=GS1.1.1665426328.1.0.1665426328.60.0.0; _ga=GA1.3.1187783785.1665426328; _gid=GA1.3.1066129420.1665426329; _gat_UA-59743207-2=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Jun 2021 03:24:31 GMT
accept-ranges: bytes
content-length: 232002
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:28 GMT
server: Apache
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=275196586838185&ev=PageView&dl=https%3A%2F%2Flavesc.com.br%2F&rl=&if=false&ts=1665426328787&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.2.1665426328786.586209148&it=1665426328548&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=275196586838185&ev=PageView&dl=https%3A%2F%2Flavesc.com.br%2F&rl=&if=false&ts=1665426328787&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.2.1665426328786.586209148&it=1665426328548&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=275196586838185&ev=PageView&dl=https%3A%2F%2Flavesc.com.br%2F&rl=&if=false&ts=1665426328787&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.2.1665426328786.586209148&it=1665426328548&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Mon, 10 Oct 2022 18:25:29 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=275196586838185&ev=ViewContent&dl=https%3A%2F%2Flavesc.com.br%2F&rl=&if=false&ts=1665426328789&sw=1280&sh=1024&v=2.9.84&r=stable&ec=1&o=30&fbp=fb.2.1665426328786.586209148&it=1665426328548&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=275196586838185&ev=ViewContent&dl=https%3A%2F%2Flavesc.com.br%2F&rl=&if=false&ts=1665426328789&sw=1280&sh=1024&v=2.9.84&r=stable&ec=1&o=30&fbp=fb.2.1665426328786.586209148&it=1665426328548&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=275196586838185&ev=ViewContent&dl=https%3A%2F%2Flavesc.com.br%2F&rl=&if=false&ts=1665426328789&sw=1280&sh=1024&v=2.9.84&r=stable&ec=1&o=30&fbp=fb.2.1665426328786.586209148&it=1665426328548&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Mon, 10 Oct 2022 18:25:29 GMT
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:34:08 GMT
expires: Thu, 05 Oct 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 427882
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.195:0
File type gzip compressed data, max compression\012- data
Hash 2853325373e1c020f4defa29faf36e77
ebeb0f817eb4b20f8730fbd68b922d50744ca982
733602161913dbe8187e7b17d111400018ee91d756fede5e16eb881973513fc5
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 14:07:32 GMT
expires: Thu, 05 Oct 2023 14:07:32 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 447478
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1241bbb-560d-4946-b821-3d3fd848e5c8.jpeg
34.120.237.76200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1241bbb-560d-4946-b821-3d3fd848e5c8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f8b93f2b38b076ed186f3baed866bdd6
47cf653b8a6e172875082b92653c631bfc881105
cada99e3a8cf87992e884e86adb5288f54a109209e88d11a076f9f664b63fed3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1241bbb-560d-4946-b821-3d3fd848e5c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5689
x-amzn-requestid: 26b4078b-a915-46d8-9a8b-12c57c604d85
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zql_ZH0uoAMF15g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6340e9fb-708725bd19ed94a64965f2d6;Sampled=0
x-amzn-remapped-date: Sat, 08 Oct 2022 03:09:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vTerEoCHWE7_FisyrkM1dOr7aDAKENTErY1qvKLuZ0HUzeSfZbhSRg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 10 Oct 2022 04:57:11 GMT
age: 48503
etag: "47cf653b8a6e172875082b92653c631bfc881105"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/themes/astra/assets/css/minified/style.min.css?ver=2.5.1
108.179.192.103200 OK 0 B URL HTTP/2 lavesc.com.br/wp-content/themes/astra/assets/css/minified/style.min.css?ver=2.5.1
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/themes/astra/assets/css/minified/style.min.css?ver=2.5.1 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 05 Aug 2020 21:20:15 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/uploads/2021/06/Banner-Lavesc.jpg
108.179.192.103200 OK 0 B URL HTTP/2 lavesc.com.br/wp-content/uploads/2021/06/Banner-Lavesc.jpg
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/uploads/2021/06/Banner-Lavesc.jpg HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/wp-content/uploads/elementor/css/post-2056.css?ver=1652910247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 22:38:54 GMT
accept-ranges: bytes
content-length: 202689
content-type: image/jpeg
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CCapriola%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=2b419261812329f36938de953d18353f
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CCapriola%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=2b419261812329f36938de953d18353f
IP 142.250.74.10:0
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CCapriola%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=2b419261812329f36938de953d18353f HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 10 Oct 2022 18:25:27 GMT
date: Mon, 10 Oct 2022 18:25:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.1.1
108.179.192.103200 OK 0 B URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.1.1
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.1.1 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 22:18:08 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2
lavesc.com.br/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.4.8
108.179.192.103200 OK 0 B URL HTTP/2 lavesc.com.br/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.4.8
IP 108.179.192.103:0
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.4.8 HTTP/1.1
Host: lavesc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lavesc.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Nov 2021 16:02:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Mon, 10 Oct 2022 18:25:27 GMT
server: Apache
X-Firefox-Spdy: h2