Report - ligpeca.com.br/iccu

Report Overview

Submitted URL
ligpeca.com.br/iccu
IP
186.227.195.234
ASN
#53055 DIMENOC SERVICOS DE INFORMATICA LTDA
Submitted
2022-12-12 12:50:54
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
ligpeca.com.br	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.6 kB	74 kB	186.227.195.234
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	341 B	797 B	93.184.220.29
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	34.215.56.181
ocsp.entrust.net	1208	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.0 kB	5.9 kB	104.110.10.32
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.3 kB	23.36.76.226
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
assets.orb.alkamitech.com	29430	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.8 kB	58 kB	143.204.55.44
iris.alkamitech.com	37068	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.3 kB	10 kB	13.226.184.33
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	456 B	746 B	142.250.74.74
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	2.8 kB	216.58.211.3
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	48 kB	34.120.237.76
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	532 B	2.2 MB	142.250.74.35
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
ajax.googleapis.com	12905	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	390 B	32 kB	142.250.74.74
myebranch.iccu.com	202788	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	390 B	8.0 kB	104.18.218.35

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-12-11	medium	ligpeca.com.br/iccu	Idaho Central Credit Union
2022-12-11	medium	ligpeca.com.br/iccu	Idaho Central Credit Union

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-12	medium	ligpeca.com.br/iccu	Phishing
2022-12-12	medium	ligpeca.com.br/iccu	Phishing
2022-12-12	medium	ligpeca.com.br/iccu/	Phishing
2022-12-12	medium	ligpeca.com.br/iccu/	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js	90 kB	2023-03-07	2024-04-25
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 142.250.74.74 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-04-25 14:08:36 Times Seen261200 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	ligpeca.com.br/iccu/	1.5 kB	2023-03-09	2023-12-26
Pretty URL ligpeca.com.br/iccu/ IP 186.227.195.234 ASN #53055 DIMENOC SERVICOS DE INFORMATICA LTDA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 00:42:12 Last Seen2023-12-26 20:13:43 Times Seen11 Hash 6b1b6441116d258073c49b61511d9edd 34d351de1e61fc0100a9ee763016e7b8d5c9f23f 43ba558c4d6fd75c69b95b1dff68c2914ecf269283a1fb1f6299ad69b75d3e95 Loading...

HTTP Transactions (46)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
43ad67f241ee3692a9c9c1da080dae58
6a024f7d71eeee257edc91ba9273416f634aaae5
636635b57f9e6d2ad9b1b949298ee7d3b5b7e251a63516ff68bfb1eceded5688

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "636635B57F9E6D2AD9B1B949298EE7D3B5B7E251A63516FF68BFB1ECEDED5688"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8931
Expires: Mon, 12 Dec 2022 15:19:34 GMT
Date: Mon, 12 Dec 2022 12:50:43 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
430f1651125c14bfa4924aa1f1a392e9
304141c5fe7ac8b370a67912b2592f9622de9600
315d77a9956f34b1615e38f5f1971dd05146980f8a36b35a8108d47ebba7e8e5

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "315D77A9956F34B1615E38F5F1971DD05146980F8A36B35A8108D47EBBA7E8E5"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6673
Expires: Mon, 12 Dec 2022 14:41:56 GMT
Date: Mon, 12 Dec 2022 12:50:43 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 12 Dec 2022 12:08:35 GMT
content-type: application/json
age: 2528
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dbd022fec0a71226daaf29b7563a8896
c37d14dc7b3849a4bb815fa325fb5e70fae54039
22da5e6e3f9507688fc8cb02183d52cf38f4adf8b2c6c52eaf5f88182471efeb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22DA5E6E3F9507688FC8CB02183D52CF38F4ADF8B2C6C52EAF5F88182471EFEB"
Last-Modified: Sun, 11 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8357
Expires: Mon, 12 Dec 2022 15:10:00 GMT
Date: Mon, 12 Dec 2022 12:50:43 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: FnC3Q5M5pMD9wiy/to5IG49IDWsmuymb5RNQEtJNI0RaP4zjjHEGsjhbqcI4jZlDYuUbknltUQk=
x-amz-request-id: 55W33B8AQFC388BH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 12 Dec 2022 12:49:36 GMT
age: 67
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

ligpeca.com.br/iccu

186.227.195.234

301 Moved Permanently

235 B

URL HTTP/1.1
ligpeca.com.br/iccu
IP
186.227.195.234:0
ASN
#53055 DIMENOC SERVICOS DE INFORMATICA LTDA

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
235 B (235 bytes)
Hash
22c9bb30b85692bd9483fcb6d031adcb
85b09432c298c0dd6678e005a1f1dc9849a4a097
7c6335cdc01d11bcdc115a8c2bc86d6bb03b6ea682774355c11046c0a650c44b

Detections

Analyzer	Verdict	Alert
openphish	Idaho Central Credit Union
fortinet	Phishing

HTTP Headers

GET /iccu HTTP/1.1
Host: ligpeca.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Mon, 12 Dec 2022 12:50:43 GMT
Server: Apache
Location: https://ligpeca.com.br/iccu
Content-Length: 235
Connection: close
Content-Type: text/html; charset=iso-8859-1

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 12 Dec 2022 12:50:43 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 12 Dec 2022 12:07:56 GMT
age: 2568
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ligpeca.com.br/iccu

186.227.195.234

301 Moved Permanently

236 B

URL HTTP/1.1
ligpeca.com.br/iccu
IP
186.227.195.234:0
ASN
#53055 DIMENOC SERVICOS DE INFORMATICA LTDA

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
236 B (236 bytes)
Hash
9edd195025a3661103a99cc251bda7a5
22b9c574cc2e9ef9a417614b945fd227384c9e7f
a25f336508859204d325dd83e2f6f41c3559fa5ab937a9e2b4a38af451d5ae71

Detections

Analyzer	Verdict	Alert
openphish	Idaho Central Credit Union
fortinet	Phishing

HTTP Headers

GET /iccu HTTP/1.1
Host: ligpeca.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 301 Moved Permanently
Date: Mon, 12 Dec 2022 12:50:44 GMT
Server: Apache
Location: https://ligpeca.com.br/iccu/
Content-Length: 236
Connection: close
Content-Type: text/html; charset=iso-8859-1

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
ee19f96e42a0eca99d00c8d91f977c35
3bf8dbf8b8ce6ea7adadf7bb92cae2f9502fbee9
6d8adcb1494bfe2ca73cd6b77eb57b2d08e07b05eb892fea98a1fde0bfb2ea12

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4690
Cache-Control: max-age=164057
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 12:50:44 GMT
Etag: "6396ef2b-1d7"
Expires: Wed, 14 Dec 2022 10:25:01 GMT
Last-Modified: Mon, 12 Dec 2022 09:06:51 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

34.215.56.181

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.215.56.181:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: JcXrxtaypDBIg0omwSUTGg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: t5gU6dkbKXEhxRicBNVxc8eI6/c=

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
0f3dad0d025c4b6b8abd5d698f00cfbd
3a82ecac8709c7acd620316502a0e774ac3b1170
8d98454c05e1bfb1e534913e69fe76f4b0cb619c02626bcdc163f7be48b1621f

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 12:50:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
0f3dad0d025c4b6b8abd5d698f00cfbd
3a82ecac8709c7acd620316502a0e774ac3b1170
8d98454c05e1bfb1e534913e69fe76f4b0cb619c02626bcdc163f7be48b1621f

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 12:50:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js

142.250.74.74

200 OK

31 kB

URL HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
142.250.74.74:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (65447)
Size
31 kB (31017 bytes)
Hash
7808e0e4b7a714230373852158500533
4a79d18722a68a2f38d52e2d3a11b550bdd30b3c
8ba5796bee6a065b8b31895e7e8d59ba564cfd36d2ce056e327588e67736f054

HTTP Headers

GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ligpeca.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Dec 2022 11:24:15 GMT
expires: Tue, 12 Dec 2023 11:24:15 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 5190
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
0f3dad0d025c4b6b8abd5d698f00cfbd
3a82ecac8709c7acd620316502a0e774ac3b1170
8d98454c05e1bfb1e534913e69fe76f4b0cb619c02626bcdc163f7be48b1621f

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 12:50:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4362
Expires: Mon, 12 Dec 2022 14:03:27 GMT
Date: Mon, 12 Dec 2022 12:50:45 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4362
Expires: Mon, 12 Dec 2022 14:03:27 GMT
Date: Mon, 12 Dec 2022 12:50:45 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4362
Expires: Mon, 12 Dec 2022 14:03:27 GMT
Date: Mon, 12 Dec 2022 12:50:45 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc582b370-f952-4f63-9937-1de61f295c46.jpeg

34.120.237.76

200 OK

5.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc582b370-f952-4f63-9937-1de61f295c46.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.5 kB (5452 bytes)
Hash
24d5e5918cf53c569d6674e598228246
241a28d882355e06b0a2428c931f9d72dd5c6c53
2ebf30d1844d23a2b7516b900b1aa4473e5c042b0e0ecb2c39675d4b4bc7910e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc582b370-f952-4f63-9937-1de61f295c46.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5452
x-amzn-requestid: eb6aca44-e834-4123-b191-eb3f007bf7b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c6OCrGM-IAMFnxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393f6dd-71fee2de2dd69c7d1d4d32fe;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 03:02:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2dzTL44JHLjIbSIFDFPwmOcNMq9-lZF4YvsBimPz3YD1c4xQF2tUCA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 03:38:01 GMT
age: 33164
etag: "241a28d882355e06b0a2428c931f9d72dd5c6c53"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F95361d29-1f54-4e09-a474-8c1dad517a28.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.1 kB (9066 bytes)
Hash
a85ca34ade4d110c1a003e236440e330
01131ebb7bb94c36c441336dd4a21415be702c80
691205cb45ccec2bb7470b541eb2ffb45b63aec175ea3932ff54e6aa1dd375b8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F95361d29-1f54-4e09-a474-8c1dad517a28.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9066
x-amzn-requestid: 2e43266d-096b-429b-972f-15886558a84d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENsFgToAMFd2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d8a-22c942d80ac86fb53f742405;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jUzAMkz0SJIT8Cqi0QnElPGp25QQ8hcLr7wPDugzdL2rldwHdhnsEw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 22:04:40 GMT
age: 53165
etag: "01131ebb7bb94c36c441336dd4a21415be702c80"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.6 kB (5619 bytes)
Hash
9f8d3e3c9e5d2ed74c3894b4825fcc2f
6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da
9e44f93e65206ae7095cf9177296f4f528f1c2597cffa4853b7d6dcabf032796

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5619
x-amzn-requestid: df7189d2-5cad-43a2-9511-20c5de53f710
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAEMPFCSIAMF4uA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d81-729683c606fd6abc5bc70534;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: kbfjvh64NjCUE-e-3z7W58vyJMisRwERUV_W99jn3vrErY4bF1SFsg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:58:39 GMT
etag: "6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da"
content-type: image/jpeg
age: 53526
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.3 kB (6311 bytes)
Hash
2020df3404a4b7c3e142af4a1330b848
2fe69b52fe03128e86550bf08474ecac82682384
37a52c158d5cfdf3589e19163cf446c02ce1466f444656080b02da82d2bcefae

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6311
x-amzn-requestid: 46ccaee0-bde8-4be6-9dc8-46e3ae356dc8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c8xUYH10oAMF8Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6394fc1b-2440251f06cb950a57489555;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 21:37:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bgmOsF49y9d_oDWjQxm7toxsydgt9HBKZunUbe-BZfSmdfJ7q0Jo3A==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:52:33 GMT
age: 53892
etag: "2fe69b52fe03128e86550bf08474ecac82682384"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.7 kB (4720 bytes)
Hash
38876d760ef06c8471468c474c1e28a7
d43cd03d5eb3e7618b6fb70c935010c2ac92ad32
a0747f29eb6084eef42d3c247594973b02c619c7ec56b6137e24b6d0362557a0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4720
x-amzn-requestid: dd990fe1-8447-403e-b276-40889af5baa0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENuF6SoAMF7oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d8a-59b5a8f92ef6111e64e16079;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SBYH2ZqOyZx6tB8u3g3dkimaCUGSWAMQhULpYs4gWrmZ6i3_1Br_zQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:57:39 GMT
etag: "d43cd03d5eb3e7618b6fb70c935010c2ac92ad32"
content-type: image/jpeg
age: 53586
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10205 bytes)
Hash
45e0c1638ad919bde19731f7987ab064
1e492807c665e6e6b24ec6ce19035fdfc6f23b92
f0d3738ec8406958470c8fd152a02a123d7654c30f974c1df5c4977a380c2d62

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10205
x-amzn-requestid: daca166e-fa82-4491-9065-a4629141fd11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c4OQAGLyoAMFQgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63932a66-0551e77243e4a6472b377f9d;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 12:30:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NRMWuTRJ5fCJ-bJj8707fTNThWiF3nBYHdyIFmdvCFaR6fRURx5OuA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 01:24:09 GMT
age: 41196
etag: "1e492807c665e6e6b24ec6ce19035fdfc6f23b92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.entrust.net/

104.110.10.32

200 OK

1.6 kB

URL HTTP/1.1
ocsp.entrust.net/
IP
104.110.10.32:0
ASN
#16625 AKAMAI-AS

File type
data
Size
1.6 kB (1588 bytes)
Hash
6354ac6175d0e793d6d9d298c7b4a5e0
e68e1e4108f9a3c581a3361e86169e0071f7c2e8
8501aefb485bc0f8942cfd30454c6fd6875af3ff394ed0c30356d3c82790b1d8

HTTP Headers

POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "8501AEFB485BC0F8942CFD30454C6FD6875AF3FF394ED0C30356D3C82790B1D8"
Last-Modified: Mon, 12 Dec 2022 10:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2347
Expires: Mon, 12 Dec 2022 13:29:52 GMT
Date: Mon, 12 Dec 2022 12:50:45 GMT
Connection: keep-alive

ocsp.entrust.net/

104.110.10.32

200 OK

1.6 kB

URL HTTP/1.1
ocsp.entrust.net/
IP
104.110.10.32:0
ASN
#16625 AKAMAI-AS

File type
data
Size
1.6 kB (1588 bytes)
Hash
6354ac6175d0e793d6d9d298c7b4a5e0
e68e1e4108f9a3c581a3361e86169e0071f7c2e8
8501aefb485bc0f8942cfd30454c6fd6875af3ff394ed0c30356d3c82790b1d8

HTTP Headers

POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "8501AEFB485BC0F8942CFD30454C6FD6875AF3FF394ED0C30356D3C82790B1D8"
Last-Modified: Mon, 12 Dec 2022 10:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2360
Expires: Mon, 12 Dec 2022 13:30:05 GMT
Date: Mon, 12 Dec 2022 12:50:45 GMT
Connection: keep-alive

assets.orb.alkamitech.com/production/themesets/e6d119d9-48fc-4426-9c07-4a93bffa8838/themes/legacy/iccu/Favicons/favicon-16x16.png

143.204.55.44

200 OK

453 B

URL HTTP/2
assets.orb.alkamitech.com/production/themesets/e6d119d9-48fc-4426-9c07-4a93bffa8838/themes/legacy/iccu/Favicons/favicon-16x16.png
IP
143.204.55.44:0
ASN
#16509 AMAZON-02

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size
453 B (453 bytes)
Hash
73e77c462e9cf12b81e6eadcca253f6a
d8594646b979c09f848519271a79f1042106297d
d1ffdd528c8b988b8e8c5020c870bfce1a2bb5fa5b323cbf8576639dffa4db1b

HTTP Headers

GET /production/themesets/e6d119d9-48fc-4426-9c07-4a93bffa8838/themes/legacy/iccu/Favicons/favicon-16x16.png HTTP/1.1
Host: assets.orb.alkamitech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ligpeca.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: image/png
content-length: 453
date: Mon, 12 Dec 2022 12:46:30 GMT
last-modified: Thu, 13 May 2021 14:04:03 GMT
etag: "73e77c462e9cf12b81e6eadcca253f6a"
x-amz-server-side-encryption: AES256
x-amz-meta-cache-control: no-cache
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HmRY_Exm-_HBuWFcWv7X1jwUse4BW68_pB--a4RxBuEYfZI8bWbQgQ==
age: 257
X-Firefox-Spdy: h2

assets.orb.alkamitech.com/production/themesets/e6d119d9-48fc-4426-9c07-4a93bffa8838/themes/legacy/iccu/Favicons/android-chrome-192x192.png

143.204.55.44

200 OK

1.4 kB

URL HTTP/2
assets.orb.alkamitech.com/production/themesets/e6d119d9-48fc-4426-9c07-4a93bffa8838/themes/legacy/iccu/Favicons/android-chrome-192x192.png
IP
143.204.55.44:0
ASN
#16509 AMAZON-02

File type
PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Size
1.4 kB (1384 bytes)
Hash
617c4058b7a5608d8794cfb57c722d5e
f12b2ca683ad372cc2a27a2fb3ab39d86187d2cd
532ab0216976347b86739466a2366f058dacb5a6741aedd9242d0c898841692e

HTTP Headers

GET /production/themesets/e6d119d9-48fc-4426-9c07-4a93bffa8838/themes/legacy/iccu/Favicons/android-chrome-192x192.png HTTP/1.1
Host: assets.orb.alkamitech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ligpeca.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: image/png
content-length: 1384
last-modified: Thu, 13 May 2021 14:04:03 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-cache-control: no-cache
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Mon, 12 Dec 2022 12:46:30 GMT
etag: "617c4058b7a5608d8794cfb57c722d5e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qGBopQO0SkA_ypR6N4UFRPZfwPYDJENqyXItu02yKijUMWTMTektBg==
age: 257
X-Firefox-Spdy: h2

assets.orb.alkamitech.com/cdn/alkami-orb-client-global/1.2.3/lib/iris/iris.shim.mobile.min.css

143.204.55.44

200 OK

611 B

URL HTTP/2
assets.orb.alkamitech.com/cdn/alkami-orb-client-global/1.2.3/lib/iris/iris.shim.mobile.min.css
IP
143.204.55.44:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (557)
Size
611 B (611 bytes)
Hash
2b495c471e337eac5d280f5519c6fc53
285689d6b41833ced6b63a3f82892d2901d4039b
06dee56fb4e2677948bc2f6ce7e20e9900e3c7431843ae3d9c9d975ff03889a7

HTTP Headers

GET /cdn/alkami-orb-client-global/1.2.3/lib/iris/iris.shim.mobile.min.css HTTP/1.1
Host: assets.orb.alkamitech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ligpeca.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-length: 611
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Jan 2022 23:15:05 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-cache-control: max-age=600, must-revalidate, public
x-amz-version-id: 3_69ApraRVNEBAh6vVkGcpe54M9k6nS4
accept-ranges: bytes
server: AmazonS3
date: Mon, 12 Dec 2022 12:45:53 GMT
etag: "2b495c471e337eac5d280f5519c6fc53"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GmNOnuL6wU2efuTT9AfFcUmGNXtKb9B4qPpAYbbpJ5ZcXNTcGrGfJg==
age: 293
X-Firefox-Spdy: h2

ligpeca.com.br/iccu/

186.227.195.234

206 Partial Content

28 kB

URL HTTP/1.1
ligpeca.com.br/iccu/
IP
186.227.195.234:0
ASN
#53055 DIMENOC SERVICOS DE INFORMATICA LTDA

File type
exported SGML document, Unicode text, UTF-8 text, with very long lines (428)
Size
28 kB (28486 bytes)
Hash
751f6fb757d4917d067c71db9c2e24fe
8db669491670b06454d5991b5247cadde1844713
e18f565da1716b60b3fadb1078af4f464316653304a0dcbc7667f55c2274376d

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /iccu/ HTTP/1.1
Host: ligpeca.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Range: bytes=40716-
If-Range: "256140e-10e52-5e9fa1fe8ce80"

HTTP/1.1 206 Partial Content
Date: Mon, 12 Dec 2022 12:50:45 GMT
Server: Apache
Last-Modified: Sat, 01 Oct 2022 14:42:50 GMT
ETag: "256140e-10e52-5e9fa1fe8ce80"
Accept-Ranges: bytes
Content-Length: 28486
Content-Range: bytes 40716-69201/69202
Connection: close
Content-Type: text/html

ligpeca.com.br/Isotope/Styles/isotope.min.css

186.227.195.234

404 Not Found

315 B

URL HTTP/1.1
ligpeca.com.br/Isotope/Styles/isotope.min.css
IP
186.227.195.234:0
ASN
#53055 DIMENOC SERVICOS DE INFORMATICA LTDA

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /Isotope/Styles/isotope.min.css HTTP/1.1
Host: ligpeca.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ligpeca.com.br/iccu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
Date: Mon, 12 Dec 2022 12:50:46 GMT
Server: Apache
Content-Length: 315
Connection: close
Content-Type: text/html; charset=iso-8859-1

iris.alkamitech.com/cdn/iris-vue@official/iris-components.shim.mobile.min.css

13.226.184.33

200 OK

910 B

URL HTTP/2
iris.alkamitech.com/cdn/iris-vue@official/iris-components.shim.mobile.min.css
IP
13.226.184.33:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (683)
Size
910 B (910 bytes)
Hash
1f44b333889e3ce2d3afd5241a867df6
479b7744a42f4a791548a78917c6e36171366279
a2846a4052aced6d5dff4411038c7a8eda6eaa668d42c587e246e0c490105147

HTTP Headers

GET /cdn/iris-vue@official/iris-components.shim.mobile.min.css HTTP/1.1
Host: iris.alkamitech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ligpeca.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css
content-length: 910
date: Sun, 11 Dec 2022 20:31:22 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 06 Dec 2022 20:31:15 GMT
etag: "1f44b333889e3ce2d3afd5241a867df6"
x-amz-server-side-encryption: AES256
x-amz-meta-cache-control: max-age=600, must-revalidate, public
x-amz-version-id: uZTL4.wSqhxOoEHfhkz7ArseYp6JyE9w
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 dfb4ab5443e579e92484775a9c80f244.cloudfront.net (CloudFront)
x-amz-cf-pop: DFW55-C1
x-amz-cf-id: KmYrmymZUTDX66U26tX7q_85usJV77RV8nF-iqX7ePNh6EqL3sio1w==
age: 58765
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
6d462d3e6bc6168ee30040355f8b96ee
7578100cefe27a95fc25fa11481d78353185a9f0
7371baa9980618773809e1f238fb57f8ec6eef6bdc37d127bead092b7fde990c

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 12:50:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

assets.orb.alkamitech.com/production/themesets/e6d119d9-48fc-4426-9c07-4a93bffa8838/themes/legacy/iccu/Stylesheets/theme.mobile.min.css?05aacd9babd07bcb06ac76954366e590e6171211

143.204.55.44

200 OK

37 kB

URL HTTP/2
assets.orb.alkamitech.com/production/themesets/e6d119d9-48fc-4426-9c07-4a93bffa8838/themes/legacy/iccu/Stylesheets/theme.mobile.min.css?05aacd9babd07bcb06ac76954366e590e6171211
IP
143.204.55.44:0
ASN
#16509 AMAZON-02

File type
data
Size
37 kB (36777 bytes)
Hash
8e11e1d696c78a31cd6224b31f34ed23
bc46529b314a9b6335e219ae7b9539b5b2e136b6
5c2d4b72de3b8be33153332c5e8812c73cb1077dd1d87d6028c6450e394d67e9

HTTP Headers

GET /production/themesets/e6d119d9-48fc-4426-9c07-4a93bffa8838/themes/legacy/iccu/Stylesheets/theme.mobile.min.css?05aacd9babd07bcb06ac76954366e590e6171211 HTTP/1.1
Host: assets.orb.alkamitech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ligpeca.com.br
Connection: keep-alive
Referer: https://ligpeca.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Fri, 28 Oct 2022 19:53:16 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-cache-control: no-cache
x-amz-version-id: Dy3AxXidX.ilC16UWQlrRnAk1rgiHIbp
server: AmazonS3
content-encoding: gzip
date: Mon, 12 Dec 2022 12:45:53 GMT
etag: W/"e496c25ff8b2d9c14976c45a5b437617"
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TJ2Wuna3dTToNES4ZangM8ZYvkkVtCy-CWL9jKDRRZYGp7rw-11-tQ==
age: 294
X-Firefox-Spdy: h2

fonts.gstatic.com/s/materialsymbolsoutlined/v75/kJEhBvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oFsI.woff2

142.250.74.35

200 OK

2.2 MB

URL HTTP/2
fonts.gstatic.com/s/materialsymbolsoutlined/v75/kJEhBvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oFsI.woff2
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 2233864, version 1.0\012- data
Size
2.2 MB (2233864 bytes)
Hash
58c5c970464c8958c9e10de42bc8059c
b7549feb15897f4861e6c69373f9e0d9a596d3b4
26b8c54578d27779d304be559e1ece4c5ea9f693da3f7f451b6cac2dba87dca7

HTTP Headers

GET /s/materialsymbolsoutlined/v75/kJEhBvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oFsI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ligpeca.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 2233864
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:43:55 GMT
expires: Thu, 07 Dec 2023 19:43:55 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Dec 2022 17:32:13 GMT
content-type: font/woff2
age: 407211
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ligpeca.com.br/Isotope/Images/app-store-badge.svg

186.227.195.234

404 Not Found

826 B

URL HTTP/1.1
ligpeca.com.br/Isotope/Images/app-store-badge.svg
IP
186.227.195.234:0
ASN
#53055 DIMENOC SERVICOS DE INFORMATICA LTDA

File type
gzip compressed data, max compression\012- data
Size
826 B (826 bytes)
Hash
e2c538ca46fec729085269ffacb276e8
acae99501f499b30ef5e854d1e7ae7f8198b9cb4
2537a5707c9c3b43bd34a64a9feb8967689516b85828d2d28868c82abd6b4831

HTTP Headers

GET /Isotope/Images/app-store-badge.svg HTTP/1.1
Host: ligpeca.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ligpeca.com.br/iccu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
Date: Mon, 12 Dec 2022 12:50:46 GMT
Server: Apache
Content-Length: 315
Connection: close
Content-Type: text/html; charset=iso-8859-1

assets.orb.alkamitech.com/cdn/alkami-iris/2.1.3/iris.android.min.css

143.204.55.44

200 OK

14 kB

URL HTTP/2
assets.orb.alkamitech.com/cdn/alkami-iris/2.1.3/iris.android.min.css
IP
143.204.55.44:0
ASN
#16509 AMAZON-02

File type
data
Size
14 kB (14148 bytes)
Hash
45b2a35e43bde2969f8894a26eb17f1b
71bbb1fbd37d6ee5c6b193dbd5be055ae87595f6
54efb6723f8cddc35ac5c5e1c6c92f6bfe4db76fe9343585b45fa54d5cba534e

HTTP Headers

GET /cdn/alkami-iris/2.1.3/iris.android.min.css HTTP/1.1
Host: assets.orb.alkamitech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ligpeca.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: text/css
x-amz-replication-status: COMPLETED
last-modified: Tue, 20 Sep 2022 17:57:00 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: NWInKtUT6WQdNn3KZszMMfpaJsRtqdaM
server: AmazonS3
content-encoding: gzip
date: Mon, 12 Dec 2022 12:50:46 GMT
cache-control: max-age=1800, private;
etag: W/"be81b5e26048fc742fb16310834da4ad"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9traScds7yvrLe8FpchGtL3kUATWnUWDdTFWZN0nuiVH_eucZ73-8A==
age: 293
X-Firefox-Spdy: h2

iris.alkamitech.com/cdn/iris-foundation/latest/iris-foundation.min.css

13.226.184.33

200 OK

7.4 kB

URL HTTP/2
iris.alkamitech.com/cdn/iris-foundation/latest/iris-foundation.min.css
IP
13.226.184.33:0
ASN
#16509 AMAZON-02

File type
data
Size
7.4 kB (7395 bytes)
Hash
37b50828c91822a0703a3481003a66a5
48eadbfe20b5ded4c1635983e7780df1e013a6a2
07348ec5ef9317e9e680c118a2e211ecefbd55bdcad1576a18885ab17f275156

HTTP Headers

GET /cdn/iris-foundation/latest/iris-foundation.min.css HTTP/1.1
Host: iris.alkamitech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ligpeca.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css
date: Sun, 11 Dec 2022 23:24:31 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 09 Mar 2022 22:09:55 GMT
etag: W/"0160c354e11f9e1f2ffcd720f880dc2e"
x-amz-server-side-encryption: AES256
x-amz-meta-cache-control: max-age=600, must-revalidate, public
x-amz-version-id: CSxxx_OHotbds835NajqvOEokfDo2Spi
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dfb4ab5443e579e92484775a9c80f244.cloudfront.net (CloudFront)
x-amz-cf-pop: DFW55-C1
x-amz-cf-id: I9y2kTzoaV6eJG2bH-HO5QAJP3dErzm8FTPriIO51piObaHVAU0J4w==
age: 48376
X-Firefox-Spdy: h2

ocsp.entrust.net/

104.110.10.32

200 OK

1.6 kB

URL HTTP/1.1
ocsp.entrust.net/
IP
104.110.10.32:0
ASN
#16625 AKAMAI-AS

File type
data
Size
1.6 kB (1588 bytes)
Hash
84feee3df6bb5fa4f06c47408717cc4f
616299c145df2a9b33d08644b987beb19396225f
c9de9f4529447f5d0188d047735c2009c99ffdb621844380d2b16f9fb8ad7821

HTTP Headers

POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "C9DE9F4529447F5D0188D047735C2009C99FFDB621844380D2B16F9FB8AD7821"
Last-Modified: Mon, 12 Dec 2022 11:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=1259
Expires: Mon, 12 Dec 2022 13:11:47 GMT
Date: Mon, 12 Dec 2022 12:50:48 GMT
Connection: keep-alive

ligpeca.com.br/iccu/

186.227.195.234

200 OK

42 kB

URL HTTP/1.1
ligpeca.com.br/iccu/
IP
186.227.195.234:0
ASN
#53055 DIMENOC SERVICOS DE INFORMATICA LTDA

File type
data
Size
42 kB (42304 bytes)
Hash
183f565cc3fb25e86f03d1dccafc9505
674896040d26622ded913c12f056176fb031d529
584aa0489fbdd5de81924805afefd46d3d06726d68bc7297d8755afe8fa0b8c8

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /iccu/ HTTP/1.1
Host: ligpeca.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 12:50:44 GMT
Server: Apache
Last-Modified: Sat, 01 Oct 2022 14:42:50 GMT
ETag: "256140e-10e52-5e9fa1fe8ce80"
Accept-Ranges: bytes
Content-Length: 69202
Connection: close
Content-Type: text/html

myebranch.iccu.com/Image/MobileLogo

104.18.218.35

200 OK

6.9 kB

URL HTTP/2
myebranch.iccu.com/Image/MobileLogo
IP
104.18.218.35:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 285 x 132, 8-bit/color RGBA, non-interlaced\012- data
Size
6.9 kB (6884 bytes)
Hash
793de00c2e5c94dfe4d879e33f78ef40
1fbca0c5c7261136ba2dcbf11b98c975d442e8f0
2dc417c13f956f7a5f91634d4629bcc1492ac237ba8839f8513227ae02b510d2

HTTP Headers

GET /Image/MobileLogo HTTP/1.1
Host: myebranch.iccu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ligpeca.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 12 Dec 2022 12:50:48 GMT
content-type: image/png
content-length: 6884
cache-control: private, max-age=604800, s-maxage=0
expires: Mon, 19 Dec 2022 12:50:48 GMT
last-modified: Mon, 12 Dec 2022 12:50:48 GMT
x-content-type-options: nosniff
x-robots-tag: none
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-svr: WEB1630213
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
cf-request-id: 15a7fc615800000b415c804000000001
set-cookie: PackageAssignment=; path=/; secure; HttpOnly; SameSite=Strict
PackageAssignment=; path=/; secure; HttpOnly; SameSite=Strict
ob_sess=MTU2M0Q3NjE5Qzg4RUFFOTVGQTBFMjAxMzcwY2QwNDI2NDVhZjc1MWIzZWRlNzRiYWIwN2JmOWM=; path=/; secure; HttpOnly; SameSite=Strict
__cf_bm=GEBPCXgdQv7Hb5dVak3TxenW2D3O6f9YYVb8g6nklFg-1670849448-0-AXjA2hYTcL0wLySPdZ/WTwK8Bn27qogvExSNX83sLgA2aX8oUO1oQhPwv03cngQ82yzlKLvZpCu8441Lzsh4UUs=; path=/; expires=Mon, 12-Dec-22 13:20:48 GMT; domain=.iccu.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7786967baa9f0b41-OSL
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200

142.250.74.74

200 OK

0 B

URL HTTP/2
fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200
IP
142.250.74.74:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ligpeca.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 12 Dec 2022 12:50:45 GMT
date: Mon, 12 Dec 2022 12:50:45 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

assets.orb.alkamitech.com/cdn/alkami-orb-client-global/1.2.3/stylesheets/mobile/base.min.css

143.204.55.44

200 OK

0 B

URL HTTP/2
assets.orb.alkamitech.com/cdn/alkami-orb-client-global/1.2.3/stylesheets/mobile/base.min.css
IP
143.204.55.44:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /cdn/alkami-orb-client-global/1.2.3/stylesheets/mobile/base.min.css HTTP/1.1
Host: assets.orb.alkamitech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ligpeca.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: text/css
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Jan 2022 23:15:05 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-cache-control: max-age=600, must-revalidate, public
x-amz-version-id: 1YmTP9P_jqSgryGSmDO1NkgGhjIvBTPw
server: AmazonS3
content-encoding: gzip
date: Mon, 12 Dec 2022 12:45:53 GMT
etag: W/"4865f8669fe9034f06986bd3eaa1916d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zwR1bnQ1ahIc8qTcSusaf1509sDCt7c4wAT_4ozcp0swgmlUO8Z1nQ==
age: 293
X-Firefox-Spdy: h2

assets.orb.alkamitech.com/cdn/alkami-iris-foundation/1.6.0/iris-foundation.min.css

143.204.55.44

200 OK

0 B

URL HTTP/2
assets.orb.alkamitech.com/cdn/alkami-iris-foundation/1.6.0/iris-foundation.min.css
IP
143.204.55.44:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /cdn/alkami-iris-foundation/1.6.0/iris-foundation.min.css HTTP/1.1
Host: assets.orb.alkamitech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ligpeca.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: text/css
x-amz-replication-status: COMPLETED
last-modified: Fri, 29 Oct 2021 15:54:54 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-cache-control: max-age=600, must-revalidate, public
x-amz-version-id: 2TMn2TOP1Rh.OqTzDXCy6nOLFjX4A2Vk
server: AmazonS3
content-encoding: gzip
date: Mon, 12 Dec 2022 12:45:53 GMT
etag: W/"b8c864cda1f61ea4ffc57ba52f038a41"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0_DZbhqmxcNeUWDOnvGKZGk3otsRCNjz_t7evzuM4Fm3Pe6UZp5MNg==
age: 293
X-Firefox-Spdy: h2

assets.orb.alkamitech.com/cdn/alkami-orb-client-global/1.2.3/stylesheets/vendor/jquery/jquery-ui.min.css

143.204.55.44

200 OK

0 B

URL HTTP/2
assets.orb.alkamitech.com/cdn/alkami-orb-client-global/1.2.3/stylesheets/vendor/jquery/jquery-ui.min.css
IP
143.204.55.44:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /cdn/alkami-orb-client-global/1.2.3/stylesheets/vendor/jquery/jquery-ui.min.css HTTP/1.1
Host: assets.orb.alkamitech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ligpeca.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: text/css
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Jan 2022 23:15:05 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-cache-control: max-age=600, must-revalidate, public
x-amz-version-id: ShkBc283V24YOr4bbvBnwDc2jO6fL3Gm
server: AmazonS3
content-encoding: gzip
date: Mon, 12 Dec 2022 12:45:53 GMT
etag: W/"0ba6b64b2cc5a2e2a1f0866d8e4f141f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aYuf2wJzKVAEFRvwxXxP-lZwj3gBTl_jEH0-lam1wLaGfekNc1llHA==
age: 293
X-Firefox-Spdy: h2

iris.alkamitech.com/cdn/iris-vue@official/iris-components.min.css

13.226.184.33

200 OK

0 B

URL HTTP/2
iris.alkamitech.com/cdn/iris-vue@official/iris-components.min.css
IP
13.226.184.33:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /cdn/iris-vue@official/iris-components.min.css HTTP/1.1
Host: iris.alkamitech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ligpeca.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css
date: Sun, 11 Dec 2022 20:31:22 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 06 Dec 2022 20:31:15 GMT
etag: W/"5f4efcef0bacb24aac4fe30d23a35227"
x-amz-server-side-encryption: AES256
x-amz-meta-cache-control: max-age=600, must-revalidate, public
x-amz-version-id: _zyIjB4UliItjmDRyiSiE250tnXJpz40
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dfb4ab5443e579e92484775a9c80f244.cloudfront.net (CloudFront)
x-amz-cf-pop: DFW55-C1
x-amz-cf-id: 7ZgwRDQY-D4_xv3NDRs3Y8PPLRTRYk4P1FpfIMyZfYxu1NwijrUr8Q==
age: 58765
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (46)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size