| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd4e95d0d8982bcd07804baf6fc88231c 5027abda0875bd2529dd4d6691784c74da71a9ee 373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7898
Expires: Sat, 04 Feb 2023 04:11:25 GMT
Date: Sat, 04 Feb 2023 01:59:47 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe935ea42be4feaed61a824b0b903913e f966cfa80d65a805cb9d7c6a53b3340865d7c51a eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6238
Expires: Sat, 04 Feb 2023 03:43:45 GMT
Date: Sat, 04 Feb 2023 01:59:47 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash9a76feabb767086ae0fa54e0ffbf763f 3655d78994a1e9838340669462728b67c8c12e54 bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8270
Expires: Sat, 04 Feb 2023 04:17:37 GMT
Date: Sat, 04 Feb 2023 01:59:47 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash30db107dcf4380cef05efea409c2e6a3 96e6a306fbc07299aba64e5c14e2bfca35872fa9 b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 01:36:12 GMT
content-type: application/json
age: 1415
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: kwO0DHhVaf7JAFmEL6M+ym9Hxg8W+YNECI8ZbYW+yiuWnqz1Kt4phBqRdM63up1ehAu372u9QMI=
x-amz-request-id: X0D2EBG26AKA0444
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 01:23:48 GMT
age: 2159
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:59:47 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Feb 2023 01:49:07 GMT
age: 641
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/loginfacebookaccount | 192.185.222.9 | 301 Moved Permanently | 0 B |
URL HTTP/1.1fruminas.com.br/loginfacebookaccount IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /loginfacebookaccount HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 04 Feb 2023 01:59:48 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://fruminas.com.br/loginfacebookaccount
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashdedf9c519ac38c4bece9c5bc895787d7 4911175c3f8a435978c5301c33c7a99a5e00a1d5 bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13615
Expires: Sat, 04 Feb 2023 05:46:43 GMT
Date: Sat, 04 Feb 2023 01:59:48 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash8e8263e8e733a90e771767d02abd9327 6f53691e05d9c52a0ae2e1ddf7eaa717595deb6f 2849a6844229cdf7ee8bd9208e28d16d4aabecac8513bb0d275d79fdce5feccd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2849A6844229CDF7EE8BD9208E28D16D4AABECAC8513BB0D275D79FDCE5FECCD"
Last-Modified: Thu, 02 Feb 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21495
Expires: Sat, 04 Feb 2023 07:58:03 GMT
Date: Sat, 04 Feb 2023 01:59:48 GMT
Connection: keep-alive
|
|
| push.services.mozilla.com/ | 44.235.159.98 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP44.235.159.98:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QJClrMmeCTLp8um/rrE5Pw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ZFhFqATAKO8VBO7cdzcfB+ZnRZ0=
|
|
| fruminas.com.br/wp-includes/css/classic-themes.min.css?ver=1 | 192.185.222.9 | 200 OK | 189 B |
URL HTTP/2fruminas.com.br/wp-includes/css/classic-themes.min.css?ver=1 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash5a18e16eb01cbaa862eb32e6b77bedb2 3abf9b913cc9f558f02cba7c9b822f8d1812cb96 d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 03:22:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 189
content-type: text/css
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.0.3 | 192.185.222.9 | 200 OK | 986 B |
URL HTTP/2fruminas.com.br/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.0.3 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashaf8993893cf0e8840cfa07c28152f7d7 020642adb362f41142e612a4aed05f187cc6fbe0 a76fed90a602ac9bc687d6889a8dac2bd929437f84af088f257a3559543841cc
GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.0.3 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 10 Oct 2022 08:32:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 986
content-type: text/css
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min.css?ver=6.1.1 | 192.185.222.9 | 200 OK | 124 B |
URL HTTP/2fruminas.com.br/wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min.css?ver=6.1.1 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with CRLF, CR line terminators Hash893dd4d34591cb544851b5a41747cdfd e8585a3187cfaa2288f0cb48e5696929306b7615 1de5e3983dd9d63c6d92bc1543a4ae8978b38fbaa8d79fbbc2035c62a68cd7cf
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min.css?ver=6.1.1 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 12:24:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 124
content-type: text/css
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/creame-whatsapp-me/public/css/joinchat-btn.min.css?ver=4.5.11 | 192.185.222.9 | 200 OK | 2.5 kB |
URL HTTP/2fruminas.com.br/wp-content/plugins/creame-whatsapp-me/public/css/joinchat-btn.min.css?ver=4.5.11 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (6021), with no line terminators Hash551e7026086fdcb28d300175aa8c7693 24eceb9f59705dfeb90fe92cb59c1dd370de56ff 1562188078829f3f5d710b46ec8ad9cd17b895d1f7b598c5906fa4d26fc15e3c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/creame-whatsapp-me/public/css/joinchat-btn.min.css?ver=4.5.11 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Oct 2022 19:39:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2462
content-type: text/css
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.0.3 | 192.185.222.9 | 200 OK | 8.5 kB |
URL HTTP/2fruminas.com.br/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.0.3 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash7973e77b98802c0ea2d4016644d1f06c 3859b417c6bef2db0058724fad81e5df2166fe27 148eeddc5b558d00af2517b77f689158b9dea1a6bf52e6e8cd9ece6e0cf0cca9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.0.3 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 10 Oct 2022 08:32:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8481
content-type: text/css
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/themes/flatsome/style.css?ver=3.16.0 | 192.185.222.9 | 200 OK | 316 B |
URL HTTP/2fruminas.com.br/wp-content/themes/flatsome/style.css?ver=3.16.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash6554499f1ec6ce0b02fd7750a9c52e0e 09c372534d62f5da19c3a2d34a7ebc591e54016d 4d8855d29c414df57189c203dfd0ad96baf67a59dc14b7782b3c7ba8f8e1b396
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/flatsome/style.css?ver=3.16.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 17 Sep 2022 15:48:02 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 316
content-type: text/css
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/themes/flatsome/assets/css/flatsome-shop.css?ver=3.16.0 | 192.185.222.9 | 200 OK | 8.1 kB |
URL HTTP/2fruminas.com.br/wp-content/themes/flatsome/assets/css/flatsome-shop.css?ver=3.16.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (24175), with no line terminators Hash7d25a52347fffbc60dae2f7f2cafa40e 09a7d93aabf802710e5269833124a9a198cc0fee 8208be57cebdbff09c36074a7fa9a9d7da18a6eb2566c2fff97e1eb3b24cb434
GET /wp-content/themes/flatsome/assets/css/flatsome-shop.css?ver=3.16.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 17 Sep 2022 15:48:02 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8067
content-type: text/css
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-table.css?ver=3.0.3 | 192.185.222.9 | 200 OK | 2.1 kB |
URL HTTP/2fruminas.com.br/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-table.css?ver=3.0.3 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (401) Hash1946fa94d19bd69c8edd1ec6d873a6d4 214e5376828aa6b147a95e3b63b29097d5639342 6d3214f741ac53c54b4b0d4eaa6e70a07d820dde9095da674ad8f2bc2a00b401
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-table.css?ver=3.0.3 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 10 Oct 2022 08:32:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2063
content-type: text/css
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/wpcf7-redirect/build/js/wpcf7r-fe.js?ver=1.1 | 192.185.222.9 | 200 OK | 2.0 kB |
URL HTTP/2fruminas.com.br/wp-content/plugins/wpcf7-redirect/build/js/wpcf7r-fe.js?ver=1.1 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashdbdb77c63dd28a8dd9f8f019d9ad54d1 dd3bea5b04778940916181f924389a5e7ab14c04 e4d9f90a96396cb47de0c8945d70a7c50b2bb0befed3f6016cd443712a3cf7fb
GET /wp-content/plugins/wpcf7-redirect/build/js/wpcf7r-fe.js?ver=1.1 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Jul 2022 12:24:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1987
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.0.3 | 192.185.222.9 | 200 OK | 11 kB |
URL HTTP/2fruminas.com.br/wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.0.3 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash68f31f156fec9521abc5d50798a55dc4 c7d367dacd71e2bddd30350391370db876bbbbc3 f0b996f22ccaed017e0617619ca0e130ee87a482ad4e042398900a41f32f4f7d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.0.3 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 10 Oct 2022 08:32:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 10776
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.0.0 | 192.185.222.9 | 200 OK | 792 B |
URL HTTP/2fruminas.com.br/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.0.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (2139), with no line terminators Hash1ca3f41c13e0027acc45f0601f8b640f cced34af0c6a59e9cee4229faa66ab39c7031506 d3bc5eaf4c6be9473dbba690825cce9a1a6f4accb6721dae7875efef54942f41
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.0.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 18 May 2021 20:00:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 792
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/creame-whatsapp-me/public/js/joinchat.min.js?ver=4.5.11 | 192.185.222.9 | 200 OK | 3.2 kB |
URL HTTP/2fruminas.com.br/wp-content/plugins/creame-whatsapp-me/public/js/joinchat.min.js?ver=4.5.11 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (8082), with no line terminators Hash4454f3d1d2c990f95a5b434529bdf8a6 ed4a23d5a3dad2d37cdd8b4e293c39a8d73ae740 c2dc85bf51a76388a7ccb3b2accf086465063751c426c04ed4f1ff149818147a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/creame-whatsapp-me/public/js/joinchat.min.js?ver=4.5.11 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Oct 2022 19:39:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3170
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.0.0 | 192.185.222.9 | 200 OK | 4.0 kB |
URL HTTP/2fruminas.com.br/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.0.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (9115) Hash30e4855ccd2fde73cd01838d073b8d4b aa39e03ffb6e39bf82b6a04d72e3f7cf7509f778 cbcfd79d48b4735b59e17b77cb3930f8a51fcdcb3d4675718a45af6077469636
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.0.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Jul 2022 22:16:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3955
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.0.0 | 192.185.222.9 | 200 OK | 1.0 kB |
URL HTTP/2fruminas.com.br/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.0.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1668) Hash0bebfb5722cbc8ac04e62aa40698be49 3bc5e4f29cb19a2d80d46dee242dabf7e42c0fd3 70d02eabbadbe176455a2bb53d8d567feca69847c067a5274987a8bdc65e3c05
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.0.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 20 Jan 2021 02:55:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1000
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-includes/js/hoverIntent.min.js?ver=1.10.2 | 192.185.222.9 | 200 OK | 707 B |
URL HTTP/2fruminas.com.br/wp-includes/js/hoverIntent.min.js?ver=1.10.2 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1464) Hash75340c1451d0b45e2c487b4aeeb6394e 67e9a70a845789c6f6a1e3f2b8061b2eb7c7548a 1622c52fe9cada9d88bae5f3efb043b42a7d0ef43373695f3533941dc7dedd2c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 08 Apr 2022 23:07:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 707
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.0.0 | 192.185.222.9 | 200 OK | 1.2 kB |
URL HTTP/2fruminas.com.br/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.0.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with very long lines (3037), with no line terminators Hash267e8958dbad03e5b8e684648aa15aa2 fb81c3ab32d537817004715e011c33f2f7efaa81 8d2937738bf3b55c9ec65b0f2429361d4a2b0679f52ef2b9700192ae20acb03e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.0.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Jul 2022 22:16:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1202
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/uploads/2020/06/Fruminas-Logo-VERSAO.png | 192.185.222.9 | 200 OK | 20 kB |
URL HTTP/2fruminas.com.br/wp-content/uploads/2020/06/Fruminas-Logo-VERSAO.png IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 400 x 155, 8-bit/color RGB, non-interlaced\012- data Hash036a6ef7f8c7aaba3a88022bf8c51c4b 41bb4cc07e14e7d232bba3597ac723afd3d41efb ff355b29c6d50dfecaaa6d60de39cfc9d1bc95b57328869e9388cb92a9c48058
GET /wp-content/uploads/2020/06/Fruminas-Logo-VERSAO.png HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jun 2020 21:55:17 GMT
accept-ranges: bytes
content-length: 19907
content-type: image/png
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.16.0 | 192.185.222.9 | 200 OK | 6.2 kB |
URL HTTP/2fruminas.com.br/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.16.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (13072) Hash4d3dad226464fec47026dfd6f1a49eff a3105b2a672b0ca221cf6c295ccae218ceb40c8f e8d51de5619cee972caabb1e2ff7859e88b5bced893c97e5945be2de887a9a44
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.16.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 17 Sep 2022 15:48:02 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6185
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.0.0 | 192.185.222.9 | 200 OK | 1.1 kB |
URL HTTP/2fruminas.com.br/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.0.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (2938), with no line terminators Hash769e9d3f7fc383ec1a02024e39730474 4f5a5edf28ed19b48c5e40747ec6896f0df8f09e 4636689d57889e984a7a1a1c6e2516b7a2d951407ca826aaf505c50002e2b486
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.0.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Nov 2021 01:30:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1093
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 | 192.185.222.9 | 200 OK | 2.7 kB |
URL HTTP/2fruminas.com.br/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (6475), with no line terminators Hash45bd1d6f7fc3a4069fc6fd400b90c961 903c7e28c7141e9fc1bdb4dfc62d043a97a01e2d c638a0057b4be0a61cfb65b1860a855a327397e9871f5dde28fa2f138fb394dc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Apr 2022 15:04:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2675
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/themes/flatsome/assets/js/woocommerce.js?ver=2114c593f5a803e4039d07c9e6fef8b6 | 192.185.222.9 | 200 OK | 7.9 kB |
URL HTTP/2fruminas.com.br/wp-content/themes/flatsome/assets/js/woocommerce.js?ver=2114c593f5a803e4039d07c9e6fef8b6 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (19398), with no line terminators Hash0ca29e8379c23da0ff70ae0e125bc0d1 8dc08d714b884efedbb47c353ea56fa4c3447850 b624439b6be8491d8836b84774635ad05123aea19fd819170e6f478081e458ba
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/flatsome/assets/js/woocommerce.js?ver=2114c593f5a803e4039d07c9e6fef8b6 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 17 Sep 2022 15:48:02 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7934
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 192.185.222.9 | 200 OK | 4.6 kB |
URL HTTP/2fruminas.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (11126) Hashacdb97105af28a7066790c6748ae2e1e 65794d2c5a9d04f747faf370bc8bacd330e69e5a dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Nov 2020 12:06:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 192.185.222.9 | 200 OK | 7.6 kB |
URL HTTP/2fruminas.com.br/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (17819), with no line terminators Hash66c68f2158dcf7d97a02f3719a17aab0 fdb04fb4c632b9fb4275006a4e402cd0d4fa393a e4b360f0e6ae1afc06f05f958e8696e5ae45257912bc2ab0b9334bd1382a51aa
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 03:22:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7621
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 | 192.185.222.9 | 200 OK | 5.3 kB |
URL HTTP/2fruminas.com.br/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (15660) Hash710f8b142ea44c0682dc2c30f318f065 49144e9b3a76d3d383b1d4359cf7a25e947f4233 708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 12 Apr 2022 08:56:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5321
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 | 192.185.222.9 | 409 Conflict | 83 B |
URL HTTP/2fruminas.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 | 192.185.222.9 | 409 Conflict | 83 B |
URL HTTP/2fruminas.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 | 192.185.222.9 | 409 Conflict | 83 B |
URL HTTP/2fruminas.com.br/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd719402de0cd695e55dab2767247da49 f12f4795987a284820f6785ec16b5032b9861d79 98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7723
Expires: Sat, 04 Feb 2023 04:08:33 GMT
Date: Sat, 04 Feb 2023 01:59:50 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd719402de0cd695e55dab2767247da49 f12f4795987a284820f6785ec16b5032b9861d79 98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7723
Expires: Sat, 04 Feb 2023 04:08:33 GMT
Date: Sat, 04 Feb 2023 01:59:50 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd719402de0cd695e55dab2767247da49 f12f4795987a284820f6785ec16b5032b9861d79 98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7723
Expires: Sat, 04 Feb 2023 04:08:33 GMT
Date: Sat, 04 Feb 2023 01:59:50 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd719402de0cd695e55dab2767247da49 f12f4795987a284820f6785ec16b5032b9861d79 98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7723
Expires: Sat, 04 Feb 2023 04:08:33 GMT
Date: Sat, 04 Feb 2023 01:59:50 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg | 34.120.237.76 | 200 OK | 8.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6661b7263315f5eb3cd2465f671e1fcd b7b5831c6b3ccc41d7a980b6088adc10ff8785f1 eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8527
x-amzn-requestid: 6a8c6487-6069-47d1-afa1-648626f85439
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyDqqGg5oAMFV-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd7fdd-0a772cde1e6fba6d7da97435;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:42:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CHWhIpyzhoPtMUplzh1430Q9FfCM1wkTc_hQsgQk6InM9tYBPGYnNg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:05:44 GMT
age: 14046
etag: "b7b5831c6b3ccc41d7a980b6088adc10ff8785f1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.16.0 | 192.185.222.9 | 200 OK | 7.1 kB |
URL HTTP/2fruminas.com.br/wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.16.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeWeb Open Font Format (Version 2), TrueType, length 7068, version 1.0\012- data Hash48c36cf085b90e204ed78cf3b5925098 8708b0fff49904b989ea4d62291957dd827dd254 8bdd2549e2df32257d86d141069f086600680d6132d18143617f0289d8926414
GET /wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.16.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 17 Sep 2022 15:48:02 GMT
accept-ranges: bytes
content-length: 7068
content-type: font/woff2
date: Sat, 04 Feb 2023 01:59:50 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 192.185.222.9 | 200 OK | 53 kB |
URL HTTP/2fruminas.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashb8bedab438904b511da3cd3ce5b8762d 308b1fffe7507d25c786132f21f83e00eee1cd91 132127267ba2eeabc3fb529f49b3282fd8ad62a6893d842a371ef36353264d4d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 03:22:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/fonts/lato/S6u9w4BMUTPHh6UVSwiPHw3q5d0.woff | 192.185.222.9 | 200 OK | 18 kB |
URL HTTP/2fruminas.com.br/wp-content/fonts/lato/S6u9w4BMUTPHh6UVSwiPHw3q5d0.woff IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeWeb Open Font Format, TrueType, length 17628, version 1.1\012- data Hashf699e6734a9356ffa2163b01162200a7 0db98c5bb65cda6170272f40074dd2174f07373e 38bcc2ae6b389940149d7f4d3c1599217606926b6a9fc788896f805c5136430f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/fonts/lato/S6u9w4BMUTPHh6UVSwiPHw3q5d0.woff HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 17 Sep 2022 15:51:07 GMT
accept-ranges: bytes
content-length: 17628
content-type: font/woff
date: Sat, 04 Feb 2023 01:59:50 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe387e59d-188b-44a0-b94c-033d7d635117.jpeg | 34.120.237.76 | 200 OK | 6.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe387e59d-188b-44a0-b94c-033d7d635117.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash45c6a062f8637e689819f505b019dc0e 61665688f1039c4fad848853a68e28d057718ad1 c9b14113eba535a2e1a6cbbf121a818ad0204fc6dd7b2ea9b592830ab927d6d1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe387e59d-188b-44a0-b94c-033d7d635117.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6718
x-amzn-requestid: 662f889b-4c25-4dec-85d4-ea9dfa8b8974
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7DE5boAMF_cA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-33ca99fc7b6eac8d5486d6c1;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WvNs1hPPXHBJs5rTIBqH3DbqLLX6si9jHF46KrsuT9BFB2N2V3zeUA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:06:20 GMT
age: 14010
etag: "61665688f1039c4fad848853a68e28d057718ad1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F584e2763-154a-41f5-94f4-afe59c3b0984.jpeg | 34.120.237.76 | 200 OK | 6.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F584e2763-154a-41f5-94f4-afe59c3b0984.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha1356818f64ee520358098b40ccb11e6 234448cd9f2c28ee12a3499a17b45f0b8a2e5487 3035ce56cfd2ec24b2ce90f8f7c616a4a289827204750809bcf0c999d5de1dc9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F584e2763-154a-41f5-94f4-afe59c3b0984.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6038
x-amzn-requestid: 103f1040-29d7-429d-a082-b8ae7c9ee6f5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7GHKKoAMFx7A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-484abba13338b7ad3238276f;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2TgFe6k_kwTq5n27VTzD6jhXpz3dHzlZ_2pvMe7fkui617bPixVNcA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:12:00 GMT
etag: "234448cd9f2c28ee12a3499a17b45f0b8a2e5487"
content-type: image/jpeg
age: 13670
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0567732b-c9d0-4bac-89d8-3dc6a16e522c.jpeg | 34.120.237.76 | 200 OK | 8.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0567732b-c9d0-4bac-89d8-3dc6a16e522c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash99bf0073acf75f9e04b52a96bf47797b fa68da2c92fa89ed3dafe9915e064fca022af21f 961b77616486483e5767f214d2417275b9c995614128acab3521b6cd2f8866e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0567732b-c9d0-4bac-89d8-3dc6a16e522c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8267
x-amzn-requestid: 8bf1f9c3-4508-489e-9f45-3ce50df74b0b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEW0HM6IAMFXog=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd80f8-2e7c768d54981cf1634830db;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:47:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ThTL_OlFd4yMELCmSzH4ziqxa8gdYgAAbxLY9VZPVaIldOUkvFVF_Q==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:12:43 GMT
age: 13627
etag: "fa68da2c92fa89ed3dafe9915e064fca022af21f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F043bf414-ba77-4973-9779-d0c124ae0baf.jpeg | 34.120.237.76 | 200 OK | 8.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F043bf414-ba77-4973-9779-d0c124ae0baf.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash28099f5ad8a27e5a49a0d1c842486329 d47caba75b363a4c008e5a9a9d0b8e39d9fa4abd 1d798d35ceae594d86fa43aa0ef47b962c52bb1557e17dda9b294bd01f374b3a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F043bf414-ba77-4973-9779-d0c124ae0baf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8352
x-amzn-requestid: 80032cef-14cd-4f56-9830-8c74891ed00f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEqQFDJIAMFspQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8174-6d3310287fc74bb27e9b038a;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:49:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: byr2TaC2xnnUl56r2iGKZI0o8Ctsv0iy42h_F7-ezKpEijaH9rr5EQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:12:53 GMT
etag: "d47caba75b363a4c008e5a9a9d0b8e39d9fa4abd"
content-type: image/jpeg
age: 13617
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 | 192.185.222.9 | 409 Conflict | 83 B |
URL HTTP/2fruminas.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Sat, 04 Feb 2023 01:59:50 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/uploads/2022/03/cropped-Fruminas-Logo-1024x1024-1-192x192.png | 192.185.222.9 | 200 OK | 16 kB |
URL HTTP/2fruminas.com.br/wp-content/uploads/2022/03/cropped-Fruminas-Logo-1024x1024-1-192x192.png IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hash84fd85cb78428e208b03e837fbcd4440 b0e290d0590104f7b0255898f401441104821184 ead55b9b345909aa2e4b7d07eaaaff2f2ddc9c64d90c507c37ca5a40b36eccf1
GET /wp-content/uploads/2022/03/cropped-Fruminas-Logo-1024x1024-1-192x192.png HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 17 Jan 2023 12:44:05 GMT
accept-ranges: bytes
content-length: 15579
content-type: image/png
date: Sat, 04 Feb 2023 01:59:50 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/uploads/2022/03/cropped-Fruminas-Logo-1024x1024-1-32x32.png | 192.185.222.9 | 200 OK | 1.6 kB |
URL HTTP/2fruminas.com.br/wp-content/uploads/2022/03/cropped-Fruminas-Logo-1024x1024-1-32x32.png IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data Hashf6b68a5056778f9244efca1454227356 6a85f296e8a41a66bb13eb73c61da565cba9f73d 6744a68b578f866759284f1728fd0e07110ba8e99404641056d57789794b086c
GET /wp-content/uploads/2022/03/cropped-Fruminas-Logo-1024x1024-1-32x32.png HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 17 Jan 2023 12:44:05 GMT
accept-ranges: bytes
content-length: 1597
content-type: image/png
date: Sat, 04 Feb 2023 01:59:50 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/themes/flatsome/assets/js/chunk.countup.js?ver=3.16.0 | 192.185.222.9 | 200 OK | 2.1 kB |
URL HTTP/2fruminas.com.br/wp-content/themes/flatsome/assets/js/chunk.countup.js?ver=3.16.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (5448), with no line terminators Hashc9b40ee70a0fac108abb51ddaa42cbe3 e09a04e4e44f7e3d48e1d5b8af6bd99ffeaa747f 09b82e6c58c8ffc47a991ae61bf830a285a49da0a9761a36593a5528f32388e8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/flatsome/assets/js/chunk.countup.js?ver=3.16.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 17 Sep 2022 15:48:02 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2054
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:50 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/themes/flatsome/assets/js/chunk.sticky-sidebar.js?ver=3.16.0 | 192.185.222.9 | 200 OK | 4.0 kB |
URL HTTP/2fruminas.com.br/wp-content/themes/flatsome/assets/js/chunk.sticky-sidebar.js?ver=3.16.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (10850), with no line terminators Hash7c1c052527195269433e5a42f8b2d7d7 5852ab940223ee358c0720b3c4aab963e7f2d30b a45d8f0df44f6aeca515ba45d96b0017e160bde95b239ba5c85470b246c1c54d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/flatsome/assets/js/chunk.sticky-sidebar.js?ver=3.16.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 17 Sep 2022 15:48:02 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4025
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:50 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/themes/flatsome/assets/js/chunk.tooltips.js?ver=3.16.0 | 192.185.222.9 | 200 OK | 5.8 kB |
URL HTTP/2fruminas.com.br/wp-content/themes/flatsome/assets/js/chunk.tooltips.js?ver=3.16.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (16876), with no line terminators Hash73152bbf5e2243523e8530eef38fa12c 25efaa475d3b43eedc9f5178bcc546d863b684d3 39cca8b45b0da4be643ee2eb4d96598942c1b163df60c53ed827261906dbd534
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/flatsome/assets/js/chunk.tooltips.js?ver=3.16.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 17 Sep 2022 15:48:02 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5815
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:50 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/themes/flatsome/assets/js/chunk.vendors-popups.js?ver=3.16.0 | 192.185.222.9 | 200 OK | 9.0 kB |
URL HTTP/2fruminas.com.br/wp-content/themes/flatsome/assets/js/chunk.vendors-popups.js?ver=3.16.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (20237), with no line terminators Hash819ef7f92c0061d83a03af287a3fcb63 dd0596cf550fb023fe72d9178d5045ab1e8f3054 a73d5e7831b1390e24e74d76f9b3315da8bc56dbbadec7f11c5c8f972d007c5a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/flatsome/assets/js/chunk.vendors-popups.js?ver=3.16.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 17 Sep 2022 15:48:02 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9029
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:50 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/?wc-ajax=get_refreshed_fragments | 192.185.222.9 | 200 OK | 290 B |
URL HTTP/2fruminas.com.br/?wc-ajax=get_refreshed_fragments IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJSON data\012- , ASCII text, with very long lines (517), with no line terminators Hash85a4a8db165559638cc89e6624cc1f22 d3fad792244f53a094707132fef73b477634522d 98df9c07fd0d3d4d04dc7743066c994679b6309fe70b2844db2f1096c6915845
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://fruminas.com.br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Cookie: cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://fruminas.com.br
access-control-allow-credentials: true
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-robots-tag: noindex
vary: Accept-Encoding
content-encoding: gzip
content-length: 290
content-type: application/json; charset=UTF-8
date: Sat, 04 Feb 2023 01:59:50 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.16.0 | 192.185.222.9 | 200 OK | 0 B |
URL HTTP/2fruminas.com.br/wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.16.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.16.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 17 Sep 2022 15:48:02 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/themes/flatsome/assets/js/flatsome.js?ver=2138faedd39ec708526d158d5a3d53d7 | 192.185.222.9 | 200 OK | 0 B |
URL HTTP/2fruminas.com.br/wp-content/themes/flatsome/assets/js/flatsome.js?ver=2138faedd39ec708526d158d5a3d53d7 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/flatsome/assets/js/flatsome.js?ver=2138faedd39ec708526d158d5a3d53d7 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 17 Sep 2022 15:48:02 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/loginfacebookaccount | 192.185.222.9 | 404 Not Found | 0 B |
URL HTTP/2fruminas.com.br/loginfacebookaccount IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /loginfacebookaccount HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://fruminas.com.br/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 04 Feb 2023 01:59:48 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fruminas.com.br/wp-content/themes/flatsome/assets/js/chunk.vendors-slider.js?ver=3.16.0 | 192.185.222.9 | 200 OK | 0 B |
URL HTTP/2fruminas.com.br/wp-content/themes/flatsome/assets/js/chunk.vendors-slider.js?ver=3.16.0 IP192.185.222.9:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/flatsome/assets/js/chunk.vendors-slider.js?ver=3.16.0 HTTP/1.1
Host: fruminas.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://fruminas.com.br/loginfacebookaccount
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 17 Sep 2022 15:48:02 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sat, 04 Feb 2023 01:59:50 GMT
server: Apache
X-Firefox-Spdy: h2
|
|