Overview

URLprintearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
IP 162.214.12.116 (United States)
ASN#46606 UNIFIEDLAYER-AS-1
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-10-04 06:53:55 UTC
StatusLoading report..
IDS alerts0
Blocklist alert9
urlquery alerts
8
Phishing - J.P.Morgan
Tags None

Domain Summary (9)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-10-04 00:45:50 UTC 18.164.68.21
printearte.com.br (19) 0 2015-09-10 12:44:08 UTC 2022-10-04 06:20:33 UTC 162.214.12.116 Unknown ranking
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-10-04 02:06:24 UTC 93.184.220.29
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-03 09:28:24 UTC 52.89.136.7
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-04 04:18:32 UTC 34.120.237.76
r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2022-10-03 07:33:36 UTC 23.36.77.32
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-03 08:07:24 UTC 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-03 09:28:24 UTC 34.117.237.239
cdnjs.cloudflare.com (1) 235 2020-10-20 10:17:36 UTC 2022-10-04 04:47:48 UTC 104.17.24.14

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-04 2 printearte.com.br/a2/js/jquery.player.js Phishing
2022-10-04 2 printearte.com.br/a2/js/jquery.CardValidator.js Phishing
2022-10-04 2 printearte.com.br/a2/js/jquery.validate.min.js Phishing
2022-10-04 2 printearte.com.br/a2/js/jquery.min.js Phishing
2022-10-04 2 printearte.com.br/a2/img/logo.svg Phishing
2022-10-04 2 printearte.com.br/a2/fonts/opensans-regular.ttf Phishing
2022-10-04 2 printearte.com.br/a2/fonts/dcefont.woff Phishing
2022-10-04 2 printearte.com.br/a2/img/icon.ico Phishing
2022-10-04 2 printearte.com.br/a2/img/background.desktop.9.jpeg Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 162.214.12.116
Date UQ / IDS / BL URL IP
2023-03-21 00:07:04 +0000 0 - 1 - 0 printearte.com.br/s3c/auth.php?NKgYObEUkvwhzx (...) 162.214.12.116
2023-03-20 18:24:47 +0000 0 - 1 - 0 printearte.com.br/d5n/auth.php?md=msndxfhcrgj (...) 162.214.12.116
2023-03-20 08:19:16 +0000 0 - 0 - 1 printearte.com.br/s3c/auth.php 162.214.12.116
2023-02-04 12:58:33 +0000 0 - 0 - 19 printearte.com.br/fx3/auth.php?md=tNdYoaBTImb (...) 162.214.12.116
2023-01-28 10:14:36 +0000 0 - 0 - 20 printearte.com.br/fx3/auth.php?md=tNdYoaBTImb (...) 162.214.12.116


Last 5 reports on ASN: UNIFIEDLAYER-AS-1
Date UQ / IDS / BL URL IP
2023-03-28 15:02:42 +0000 0 - 3 - 0 ruthlessmma.com/aquafina/olympics/Fasken/3mai (...) 162.241.124.47
2023-03-28 15:01:45 +0000 0 - 3 - 0 animelovers.ga/mail1.php 162.241.87.165
2023-03-28 15:00:29 +0000 0 - 1 - 6 vvww-support.com/expire/index2.html 162.241.27.24
2023-03-28 14:43:50 +0000 0 - 0 - 3 cloudgeardesigns.com/ 162.241.114.172
2023-03-28 14:38:17 +0000 0 - 6 - 0 skilltrackers.com/product/employee-retention- (...) 162.241.85.156


Last 5 reports on domain: printearte.com.br
Date UQ / IDS / BL URL IP
2023-03-21 00:07:04 +0000 0 - 1 - 0 printearte.com.br/s3c/auth.php?NKgYObEUkvwhzx (...) 162.214.12.116
2023-03-20 18:24:47 +0000 0 - 1 - 0 printearte.com.br/d5n/auth.php?md=msndxfhcrgj (...) 162.214.12.116
2023-03-20 08:19:16 +0000 0 - 0 - 1 printearte.com.br/s3c/auth.php 162.214.12.116
2023-02-04 12:58:33 +0000 0 - 0 - 19 printearte.com.br/fx3/auth.php?md=tNdYoaBTImb (...) 162.214.12.116
2023-01-28 10:14:36 +0000 0 - 0 - 20 printearte.com.br/fx3/auth.php?md=tNdYoaBTImb (...) 162.214.12.116


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-07 18:36:24 +0000 37 - 0 - 9 dorainsurance.com/auth.php?md=ROUgtFXanJHLhNS (...) 107.180.11.206
2023-03-07 15:31:03 +0000 35 - 0 - 9 dorainsurance.com/auth.php?lCZPIHTYkOmuBXgJMp (...) 107.180.11.206
2023-03-07 08:43:50 +0000 37 - 0 - 9 dorainsurance.com/auth.php?EVoziDMbfAjyBextUS (...) 107.180.11.206
2023-03-07 05:47:39 +0000 37 - 0 - 9 dorainsurance.com/auth.php?md=ROUgtFXanJHLhNS (...) 107.180.11.206
2023-03-06 20:25:51 +0000 35 - 0 - 8 dorainsurance.com/auth.php?md=EVoziDMbfAjyBex (...) 107.180.11.206

JavaScript

Executed Scripts (7)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 4) - SHA256: b1ab1e892617f210425f658cf1d361b5489028c8771b56d845fe1c62c1fbc8b0
2022


HTTP Transactions (39)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         18.164.68.21
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 06:04:12 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bb21de87e304f4ab90cafcf782a8548e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: sljeUF35v1yt0ABX_IBq6GjJhO46zcPLBSewtRcsEIQlwiGggBklFQ==
Age: 2972


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6912
Expires: Tue, 04 Oct 2022 08:48:56 GMT
Date: Tue, 04 Oct 2022 06:53:44 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A9FB1F7ADE7C8A79D2EE83E9B7215E66DC89AC733B11079297A8F4B9ACEAE1F5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4984
Expires: Tue, 04 Oct 2022 08:16:48 GMT
Date: Tue, 04 Oct 2022 06:53:44 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: +TCh1MkZ7kfgDx2EH7tZ3AdyIPF7GHGaIRtCwoLWLlaDlWLEFHq8tVA0hKQhcc75WQSYUFsSf8E=
x-amz-request-id: 1WTYT5AQ5JN0CF6E
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 04 Oct 2022 06:51:11 GMT
age: 153
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 04 Oct 2022 06:53:44 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI= HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 04 Oct 2022 06:53:44 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5; path=/
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 26105
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (478), with CRLF line terminators
Size:   26105
Md5:    f1dda72cb343433c08eb79a1948dd9dc
Sha1:   426f556a78900ef6aabf110d35a1c48814bf6100
Sha256: 969cd49252fd65b42d992ec7ef6ffe1baaaab4d8f70beda20d29e0b23b533211
                                        
                                            GET /ajax/libs/jquery.mask/1.14.10/jquery.mask.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://printearte.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.24.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Tue, 04 Oct 2022 06:53:45 GMT
content-length: 4517
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-4e98"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 3581611
expires: Sun, 24 Sep 2023 06:53:45 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0RgT5luWcwSi25tLsxdAL4dJuw3RDSoZl5htN5Eqj8g5jmu2JtU3QZdRAWh3x%2Bgoa34%2B7ZBESf%2FMCsH6uJwrsth%2BLAwZeNC3t8Bt5WoXyfLQ5f1764kTuboTR5aZmvUs0DDXo3sd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 754c0095ca76b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   4517
Md5:    e40e054c5726f042bad463e3774a2777
Sha1:   5c9413b72837a440b327444104830c35ae3b052c
Sha256: fcc8a86d2e89e8fbe9815d50c23bf205191ab8a6c0bec67358cd975d94283ff8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4479
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 06:53:45 GMT
Last-Modified: Tue, 04 Oct 2022 05:39:06 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         18.164.68.21
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 04 Oct 2022 06:32:53 GMT
Expires: Tue, 04 Oct 2022 07:12:21 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c091804e03ab5aaaa5fa50ae3fb748d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: iEwYtAcwEBzdUVCsOnZbehuKQG576jfdv_JZOhIZIf5KwUaMZgJmOw==
Age: 1252


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /a2/js/jquery.player.js HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 04 Oct 2022 06:53:45 GMT
Server: Apache
Last-Modified: Fri, 24 Sep 2021 12:01:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 9898
Keep-Alive: timeout=5, max=99


--- Additional Info ---
Magic:  ASCII text, with very long lines (50474), with no line terminators
Size:   9898
Md5:    695bd64db63b7a4f57dd754ca4995ff9
Sha1:   d7261e2734398547598f0aec0928dcfba013bff2
Sha256: 567098561f01f59a54728573b1f8df8522b279be26954e5904145305bde2eada

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /a2/js/jquery.CardValidator.js HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 04 Oct 2022 06:53:45 GMT
Server: Apache
Last-Modified: Mon, 28 Aug 2017 18:03:08 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 2083
Keep-Alive: timeout=5, max=100


--- Additional Info ---
Magic:  ASCII text
Size:   2083
Md5:    5e3812c918f22e125f3ea8c08bceaf76
Sha1:   d5e6624b80474ea77e1adb60db6b0ded24205627
Sha256: 31d0740c9a71776c253640a6915be5b120d3e90b6765d1d46f94c72a908b185e

Alerts:
  urlquery:
    - Phishing - J.P.Morgan
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /a2/js/jquery.validate.min.js HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 04 Oct 2022 06:53:45 GMT
Server: Apache
Last-Modified: Sat, 11 Aug 2018 09:12:40 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 8046
Keep-Alive: timeout=5, max=100


--- Additional Info ---
Magic:  ASCII text, with very long lines (833), with CRLF line terminators
Size:   8046
Md5:    0d22a2c375340d6f68c7832f5bda6a01
Sha1:   16dfdcf36be9b17505177bf189baa072391da753
Sha256: 045beaf8c0f59e447b3bc0e6aa42da1c9cc563bf68eedcdd17f378afd0a084fe

Alerts:
  urlquery:
    - Phishing - J.P.Morgan
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ayhnbFSnaVkZhU/SB2M8OQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.89.136.7
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: C1wNF/aoPx8Hs7RRr+frfi79GVo=

                                        
                                            GET /a2/css/lostyle.css HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 04 Oct 2022 06:53:45 GMT
Server: Apache
Last-Modified: Wed, 08 Apr 2020 17:00:34 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 15956
Keep-Alive: timeout=5, max=100


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   15956
Md5:    8caeecf9afc9290ddb1fddd0dc6631d1
Sha1:   9e2b379226bfc47b963fe33dd4ecb71da056eedd
Sha256: 7d27898c3d4e3e2f6bfce2d14c1bface75802ae741d44364c41e0be93698a17d

Alerts:
  urlquery:
    - Phishing - J.P.Morgan
                                        
                                            GET /a2/js/jquery.min.js HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 04 Oct 2022 06:53:45 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 04:17:40 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 40021
Keep-Alive: timeout=5, max=100


--- Additional Info ---
Magic:  ASCII text, with very long lines (568)
Size:   40021
Md5:    514a4c838e493228ce16d0b1b5914751
Sha1:   78b1e5eaef6056170d8995820ae5277fe5c9a7a5
Sha256: 4f0974852ba99efb4adb48759d70ea2dc69e7a9f9a824f9947d1a136c8145565

Alerts:
  urlquery:
    - Phishing - J.P.Morgan
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /a2/css/style.css HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 04 Oct 2022 06:53:45 GMT
Server: Apache
Last-Modified: Fri, 03 Apr 2020 17:40:52 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   68491
Md5:    4bb7500c8e365a32a7430a3eb3c16f67
Sha1:   286b2e8c9959b219109e21f52c6ef54975e7a172
Sha256: a6745a01df880c2b8abc2b129a84ce094865e8bc132399f40791f07c13ecfaf4

Alerts:
  urlquery:
    - Phishing - J.P.Morgan
                                        
                                            GET /a2/img/aioe_icon_1_pid_lg.png HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 04 Oct 2022 06:53:45 GMT
Server: Apache
Last-Modified: Mon, 20 Sep 2021 14:51:00 GMT
Accept-Ranges: bytes
Content-Length: 4004
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=99


--- Additional Info ---
Magic:  PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced\012- data
Size:   4004
Md5:    210d4f89d07fe1f8fd4d9a319e63933f
Sha1:   8b9f60d4c9368881d3cfb41fb7426675e03619db
Sha256: 8e2e5ed99b3cf11d88f281c0ad9ac0aaa30c311515536c8a9c90be58ca56ec39
                                        
                                            GET /a2/img/alert.gif HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 04 Oct 2022 06:53:45 GMT
Server: Apache
Last-Modified: Mon, 06 Apr 2020 21:12:04 GMT
Accept-Ranges: bytes
Content-Length: 6926
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=99


--- Additional Info ---
Magic:  GIF image data, version 89a, 240 x 240\012- data
Size:   6926
Md5:    6b3fe3fcfdc8a4f64ce935194f5591ab
Sha1:   64d7c83fa447c9b84997b034d8434155ae53163e
Sha256: 86a86f9ba8a23418cb079bbf61fe64974770fb416a27384ef80045976487894e
                                        
                                            GET /a2/img/aioe_icon_2_card_lg.png HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 04 Oct 2022 06:53:45 GMT
Server: Apache
Last-Modified: Mon, 20 Sep 2021 14:53:10 GMT
Accept-Ranges: bytes
Content-Length: 3262
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=99


--- Additional Info ---
Magic:  PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced\012- data
Size:   3262
Md5:    b8ce783abcee5ceb012b84d6f275b908
Sha1:   ef64977d3f752bdefd0df2360600908ef8575324
Sha256: ec7a2e669f551ad0588a2ce4b1ee04fd5ae9ee16042fc97d022c6b287b9a6494
                                        
                                            GET /a2/img/aioe_icon_3_devices_lg.png HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 04 Oct 2022 06:53:45 GMT
Server: Apache
Last-Modified: Mon, 20 Sep 2021 14:54:26 GMT
Accept-Ranges: bytes
Content-Length: 3677
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=99


--- Additional Info ---
Magic:  PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced\012- data
Size:   3677
Md5:    33ac311a458863ee4fc16b6fae4a40b5
Sha1:   9b65fd7af34bdaaddcde363383114f706b335ad8
Sha256: e457f20d64d186c61a8467fe70d4eec890ed7fb85d5de2a9fc31834567131a1f
                                        
                                            GET /a2/img/emdef213.png HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 04 Oct 2022 06:53:45 GMT
Server: Apache
Last-Modified: Sat, 04 Apr 2020 20:34:26 GMT
Accept-Ranges: bytes
Content-Length: 26120
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=99


--- Additional Info ---
Magic:  PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size:   26120
Md5:    f97e9297a90a73c16b5734c0910785ce
Sha1:   d9df719d58da061ccf75349314e562f8b22b76d3
Sha256: 9f926e83679171e34c289ff3aa5b7f067e75cfa564345f53941ca824c42d5f77
                                        
                                            GET /a2/img/logo.svg HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/css/lostyle.css
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Tue, 04 Oct 2022 06:53:46 GMT
Server: Apache
Last-Modified: Fri, 03 Apr 2020 16:54:14 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 645
Keep-Alive: timeout=5, max=98


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text
Size:   645
Md5:    d9f9bf9d31b5f774a174920f02af0cbd
Sha1:   32207860ceec665b5e3e43cb93964942d8c95494
Sha256: 152fa82655f284db8ec59d3a30631f9ebdb0e2ef44e94801d0a569881f39f956

Alerts:
  urlquery:
    - Phishing - J.P.Morgan
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /a2/img/loading.gif HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 04 Oct 2022 06:53:45 GMT
Server: Apache
Last-Modified: Sat, 11 Aug 2018 08:03:50 GMT
Accept-Ranges: bytes
Content-Length: 38636
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=98


--- Additional Info ---
Magic:  GIF image data, version 89a, 200 x 200\012- data
Size:   38636
Md5:    d10ef01e81faa2c2d812bdf670b4e072
Sha1:   77d09a57b2091fd7665dff763a5eab23e0ff907e
Sha256: 5e3d5246b17e19e65385092db07554d8e1c5c4a226a6d7f97824b8e1e8571e34
                                        
                                            GET /a2/fonts/opensans-regular.ttf HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: x-font/ttf
                                        
Date: Tue, 04 Oct 2022 06:53:46 GMT
Server: Apache
Last-Modified: Wed, 15 Apr 2020 08:35:48 GMT
Accept-Ranges: bytes
Cache-Control: max-age=0
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 24702
Keep-Alive: timeout=5, max=98


--- Additional Info ---
Magic:  TrueType Font data, 19 tables, 1st "FFTM", 18 names, Microsoft, language 0x409, Digitized data copyright \251 2010-2011, Google Corporation.Open SansRegularAscender - Open Sans\012- data
Size:   24702
Md5:    813f15507201fff80e70d44b3625ed33
Sha1:   e064bf094b063661d54592ec1ce7922848d9081c
Sha256: 75fc65ef4942d7905326db1102af7dc166908c1abe070537c5589f629bfadb16

Alerts:
  urlquery:
    - Phishing - J.P.Morgan
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /a2/img/congra.png HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 04 Oct 2022 06:53:46 GMT
Server: Apache
Last-Modified: Mon, 02 Dec 2019 14:22:14 GMT
Accept-Ranges: bytes
Content-Length: 22060
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=98


--- Additional Info ---
Magic:  PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size:   22060
Md5:    1cb46cbb550a7047d40ff30244ca144b
Sha1:   8c41692d4a18624338f9ec32f569b028aa20f827
Sha256: 065a5ede3e090578c581c77883c6acfa9dc9393efc2f19775cfb410263fa8e1c
                                        
                                            GET /a2/fonts/dcefont.woff HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://printearte.com.br/a2/css/style.css
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: x-font/woff
                                        
Date: Tue, 04 Oct 2022 06:53:46 GMT
Server: Apache
Last-Modified: Fri, 03 Apr 2020 17:34:38 GMT
Accept-Ranges: bytes
Content-Length: 70296
Cache-Control: max-age=0
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=98


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 70296, version 0.0\012- data
Size:   70296
Md5:    2ec43bffa4424b28d0cc96b37cca33a4
Sha1:   1cde2661fb95ece87155c7931d5da6911331ef43
Sha256: 6ea71f4189e78297e3d1834c586a10dd39826ed8361cb1268b847cef45e03cb1

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /a2/img/icon.ico HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Tue, 04 Oct 2022 06:53:46 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 05:43:34 GMT
Accept-Ranges: bytes
Content-Length: 32038
Cache-Control: max-age=0
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=97


--- Additional Info ---
Magic:  MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size:   32038
Md5:    5744986eb3dc6f2da92157a651889902
Sha1:   5a558b58498fab2aeb742acdab51e0c2fbc78385
Sha256: 625816f80596303e9de8e68695973369faa462b416202825b03899c781464fb9

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /a2/img/background.desktop.9.jpeg HTTP/1.1 
Host: printearte.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://printearte.com.br/a2/auth.php?md=MqAFYsGNidxWznUSCacI&MqAFYsGNidxWznUSCacI=
Cookie: PHPSESSID=e1e205cec829aa5c31e24bff9a04e1a5

search
                                         162.214.12.116
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 04 Oct 2022 06:53:46 GMT
Server: Apache
Last-Modified: Wed, 22 Sep 2021 11:53:32 GMT
Accept-Ranges: bytes
Content-Length: 251996
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=5, max=98


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data
Size:   251996
Md5:    bbb292b841d1b68c69fd41b2d222a99a
Sha1:   64e16ac0b4f89ab6491182f1291efdcc32f41f0f
Sha256: adeebee7de25f9f59583ffc96521843d8fddf218d650643a0accdfe8bfd527ad

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5987
Expires: Tue, 04 Oct 2022 08:33:34 GMT
Date: Tue, 04 Oct 2022 06:53:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5987
Expires: Tue, 04 Oct 2022 08:33:34 GMT
Date: Tue, 04 Oct 2022 06:53:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5987
Expires: Tue, 04 Oct 2022 08:33:34 GMT
Date: Tue, 04 Oct 2022 06:53:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5987
Expires: Tue, 04 Oct 2022 08:33:34 GMT
Date: Tue, 04 Oct 2022 06:53:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5987
Expires: Tue, 04 Oct 2022 08:33:34 GMT
Date: Tue, 04 Oct 2022 06:53:47 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 04:42:51 GMT
age: 7856
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6315
Md5:    206fb65e75dbadf119512f71e0b78402
Sha1:   58ff0bf8ce7528b303d28bab01a80ad721705569
Sha256: 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4fcdf5f2-fb82-429f-a6f0-8f79d8aa9106.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9455
x-amzn-requestid: c7e1aa21-0afd-4329-a886-ca52e1a30c7e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcqJXHLUIAMFU1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5708-1905710834041431314b11be;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:41:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: zt2nDg8lZAtZQI2RIo5Pq35GQHxyeN6kiVI8E6HiV_c4BLDwYyhbJQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:10:52 GMT
age: 31375
etag: "cf021352d993967e78552b275424ff139e4ef66c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9455
Md5:    50556325e5a38a5dd7802b1391815bcb
Sha1:   cf021352d993967e78552b275424ff139e4ef66c
Sha256: 96fd2e848a45d071e334a8d08c8b89215f80f01f947af6da2efaee72dd16914c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F840ae91d-bdbe-4236-ad14-27b04e390b6a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 2761
x-amzn-requestid: 00090151-da40-48e8-98f0-a0c579fe6d1c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpI_EgdIAMFc0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b556c-06ceb1750213c44130848bf2;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: tnLSKunYCXPQiG357F3pxokcn8BJDjBxvx8MmQo2XwY7_eCzD7ZlIw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:31 GMT
age: 32956
etag: "0f0c8f45a22563c3c87ab7ec6279fabc96cdfb1f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   2761
Md5:    fb7d0bdcd7cf60e39ee64d92f5694384
Sha1:   0f0c8f45a22563c3c87ab7ec6279fabc96cdfb1f
Sha256: a6dd1fade6b47e539dd42ed07d2cf58179db10fe946809f201889a1f9c4ef282
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92f8209d-8dc3-45f5-bfb8-151edb23e30c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4996
x-amzn-requestid: 2f13b6ea-4426-4b3f-81be-5d8ca0278ce7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcrokFkroAMF0XA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5969-421b4993676a68df2b43ad65;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:51:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: tvsX13aye1PnjbI6DPTzqGvFUCG6YumA90lx8BzSZsyN8Jj3eDHyVg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:33:06 GMT
etag: "16f2fe758de4ebf7d654cb9669c73f030eb1fdef"
age: 30041
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4996
Md5:    126f1f4538e5e4228a4f36d3b02e9d62
Sha1:   16f2fe758de4ebf7d654cb9669c73f030eb1fdef
Sha256: 594210beaabbc35a37d5d648836277f950e46b2d4c2eab2abde2d33beafdff37
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481896f6-cdf2-442f-aea2-dfa2c7c45f77.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8738
x-amzn-requestid: ede4db78-f2ab-4226-a855-dc7373978dfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTFrBoAMFR3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-2776543e774f0016329ddade;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: nKHkVE65lTlwb2EAe8mhhOmwqoTXGDOcWQu-RS1K2fMRV2_l7HT1IA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 32967
etag: "d830b94bea3b5698e5192a7ea05f90b25b2f9cc9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8738
Md5:    d5745f8e3528f481ae2acf05b4abd3d0
Sha1:   d830b94bea3b5698e5192a7ea05f90b25b2f9cc9
Sha256: 313e11915f0869a608c830637b9dfd236ff28a8fb3354c3cc8748816b0ee18b0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9917
x-amzn-requestid: 2dff93d9-795d-4885-9b82-610b0d235a82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTGEnIAMF1zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-117afa703663ada75627792c;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DOS5kVEVqBrCVMKRw07fX-6HDgWVb9lJwkVM2pXs0PQHys6CBJUVfQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 32967
etag: "22aab05208a01ae5def4d63dc145085630f57bcb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9917
Md5:    d8c08f8066cc732de8befd6ccd629a95
Sha1:   22aab05208a01ae5def4d63dc145085630f57bcb
Sha256: f8a560a0563518d992d0bd2655d2b5c406435a18e874ca00b51374d2ff901770