firefox.settings.services.mozilla.com/v1/
54.230.111.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 54.230.111.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 13:53:49 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: YE5d6F0bYi9-GxSZ_6sVBALPzA4YQo9NAHihUN4NXp0IqxYH-Pl6Dw==
Age: 548
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11485
Expires: Wed, 05 Oct 2022 17:14:22 GMT
Date: Wed, 05 Oct 2022 14:02:57 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
54.230.111.99200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 54.230.111.99:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 05 Oct 2022 04:02:33 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4oAaETW8VuHuzxT9fZERyORW54Sb-TiqQR5b6omxr6uofrh0AfPfjA==
age: 36025
X-Firefox-Spdy: h2
contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
138.68.231.91301 Moved Permanently 571 B URL HTTP/1.1 contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (319)
Hash f67384690ee84f7a0893d0a6ca1c6656
dcf3a6b6edfafcdeb56e55fa28c7ed187438eef7
6ed60970ee70cc578c6c9fea3d16d844b8702c9a29eb686858441657bdd489d4
GET /wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219 HTTP/1.1
Host: contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 05 Oct 2022 14:02:57 GMT
Server: Apache/2.4.29 (Ubuntu)
Location: https://contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Content-Length: 571
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 05 Oct 2022 14:02:57 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
54.230.111.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 54.230.111.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Wed, 05 Oct 2022 13:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Wed, 05 Oct 2022 13:43:18 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: K3RpgvBKtu1fDjEzYUeYANa8TOJaAf2njN5DyE3-ukC_wnvp3ZPzMw==
Age: 2005
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 95a9d19dcbc7af5e47419761579e484c
edc36ff7677444b53f4d6d9b0eeb5d0aec2b72a2
2a6822e3a186d67b5e0de51e21b8bea866e62ba0d8cc41fc14e524d8c057dde5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A6822E3A186D67B5E0DE51E21B8BEA866E62BA0D8CC41FC14E524D8C057DDE5"
Last-Modified: Wed, 05 Oct 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20874
Expires: Wed, 05 Oct 2022 19:50:52 GMT
Date: Wed, 05 Oct 2022 14:02:58 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 1561c6be7c89d1357a80d12de47b6e74
9a705277922ecca583c867af58b3efce099f83bd
e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4412
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 14:02:58 GMT
Last-Modified: Wed, 05 Oct 2022 12:49:26 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
138.68.231.91301 Moved Permanently 3 B URL HTTP/1.1 contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type Unicode text, UTF-8 text, with no line terminators
Hash ecaa88f7fa0bf610a5a26cf545dcd3aa
57218c316b6921e2cd61027a2387edc31a2d9471
f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
GET /wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219 HTTP/1.1
Host: contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Date: Wed, 05 Oct 2022 14:02:58 GMT
Server: Apache/2.4.29 (Ubuntu)
Expires: Wed, 05 Oct 2022 15:02:58 GMT
Cache-Control: max-age=3600
X-Redirect-By: WordPress
Location: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Content-Length: 3
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
push.services.mozilla.com/
34.214.236.46101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.214.236.46:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LgSZ7aE1TNRrB2yL/8qc2A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YRYmHTyicU/Ic+jzOehvfreHeeI=
www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
138.68.231.91404 Not Found 10 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (8047), with CRLF, LF line terminators
Hash b9a37515903f8cb1e047472e938326a3
127dc607ec6574e41ac2cc28030499f3e89e185f
c2834a14d2e6df25ca2fa83f2800063a6311828f7fa618d29775dce68024d2a2
GET /wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 404 Not Found
Date: Wed, 05 Oct 2022 14:02:59 GMT
Server: Apache/2.4.29 (Ubuntu)
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.contabilidadenobrasil.com.br/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10087
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
d335luupugsy2.cloudfront.net/js/integration/stable/rd-js-integration.min.js
54.230.245.36200 OK 5.1 kB URL HTTP/2 d335luupugsy2.cloudfront.net/js/integration/stable/rd-js-integration.min.js
IP 54.230.245.36:0
File type Unicode text, UTF-8 text, with very long lines (14095)
Hash 037b8303bce609f3647bd079508031b2
b76218de9ed86ba5eb7a432f264c016da0b044ea
c2a0cc110766fc701e4aad2ec2deb59fdbdcbc1b22c957832948377d456fa87a
GET /js/integration/stable/rd-js-integration.min.js HTTP/1.1
Host: d335luupugsy2.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 5126
last-modified: Mon, 14 Mar 2022 19:11:46 GMT
content-encoding: gzip
x-amz-version-id: EFK6hy2tasKcabJ9JHnpmDSfRZbvtSM9
accept-ranges: bytes
server: AmazonS3
date: Wed, 05 Oct 2022 01:48:48 GMT
cache-control: max-age=86400, must-revalidate
etag: "037b8303bce609f3647bd079508031b2"
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2TPBAqJpVD09RuQY26nPdMINkE7Jm92oTMf4BJDX5uaESJgFLP9axg==
age: 44051
X-Firefox-Spdy: h2
www.contabilidadenobrasil.com.br/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
138.68.231.91200 OK 12 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (43771)
Hash e5548800176e913a9084f47a3e1e04f6
eff4604acc5c26ae82a19188de2f98bf5b79d80c
a2569c768eaca09f2483b971fcebb97badd57c9a16b5ae3e16b8cdcd8c688b07
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:02:59 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Mon, 03 Oct 2022 20:12:21 GMT
ETag: "15b64-5ea26f6157337-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:02:59 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11681
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c3ab8bf820942d1e8b0b15e2ca70bb23
37739c574978a59036b0b252ff738724073a48c5
30c7472c2564004845b02eb55e19ecac95b0d2eb3ae416dbc3848ecc7bcb093f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 14:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s7.addthis.com/js/300/addthis_widget.js
23.38.200.123200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP 23.38.200.123:0
File type ASCII text, with very long lines (54602)
Size 116 kB (116423 bytes)
Hash d5b9b7a3accd3b7b7de639c072ae3ee2
9583b5c046d78af5c6379d844219f828aa2222d0
648dad6716bb917c7d981e7772fca499d9583717fd83ffef47b0534cb9132b60
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-type: application/javascript
content-encoding: gzip
content-length: 116423
date: Wed, 05 Oct 2022 14:02:59 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=6LcDe8AUAAAAAIeOp_gOUnA7ugyjy6gqdbyksJ8I&ver=3.0
142.250.74.164200 OK 584 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6LcDe8AUAAAAAIeOp_gOUnA7ugyjy6gqdbyksJ8I&ver=3.0
IP 142.250.74.164:0
File type ASCII text, with very long lines (884), with no line terminators
Hash 467a07e917a4f2cc8b769657a9521b61
98a32e05d4ebec0a5e04b34a88f36996d8ee9bad
2b60fad1194d4170cede752322199363be21bad91d8dcc300d1011a30e509a77
GET /recaptcha/api.js?render=6LcDe8AUAAAAAIeOp_gOUnA7ugyjy6gqdbyksJ8I&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 05 Oct 2022 14:02:59 GMT
date: Wed, 05 Oct 2022 14:02:59 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 584
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash f936b953fdf91692463e6745f5151375
9f94b177ba59497086040cbec72f9e26e22a54c3
21c4c1a25e3f41ea5d0262216d19cb081023a79500eae7dab8b8c1f5022ad18e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 14:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.contabilidadenobrasil.com.br/wp-content/plugins/font-awesome-4-menus/css/font-awesome.min.css?ver=4.7.0
138.68.231.91200 OK 7.1 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/plugins/font-awesome-4-menus/css/font-awesome.min.css?ver=4.7.0
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (30837)
Hash 52f1a8a2ce85fa8432308b33bc1a2e79
fd80917af5371c8ecad0198592a1e7cce4b77b0e
07bd6a9ea0213e20f362485aadc17a88c486ecfb394004b41b8b38db6e6a35f6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/font-awesome-4-menus/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:02:59 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 16 Mar 2019 18:59:27 GMT
ETag: "7918-5843ac12fa22a-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:02:59 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7053
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.contabilidadenobrasil.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
138.68.231.91200 OK 972 B URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
Hash 8bf268dfcca7cb20719b7ea14373ef4a
58bd839bbf0e8cc082f0a488b538b4ec71bebd2e
eece4a14939273c7af07bce8bab3a6cfc2c9de44c0eea82cc886abac13cb3870
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:02:59 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Mon, 03 Oct 2022 20:12:36 GMT
ETag: "aab-5ea26f6fc0a49-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:02:59 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 972
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.contabilidadenobrasil.com.br/wp-content/themes/contabilidadenobrasil/style.css?ver=3.0
138.68.231.91200 OK 990 B URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/themes/contabilidadenobrasil/style.css?ver=3.0
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
Hash 7315d5e94837e6cec75516b456988884
f6806187244debc63323a6cf351aaf822bfedf5b
ebf643d3de7e26fa21123fd3f41a04fdab5a63a793f3b4d9406be3d62025c92c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/contabilidadenobrasil/style.css?ver=3.0 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:02:59 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 16 Mar 2019 17:36:43 GMT
ETag: "a2d-58439994d112f-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:02:59 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 990
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.contabilidadenobrasil.com.br/wp-content/themes/flatsome/assets/css/fl-icons.css?ver=3.3
138.68.231.91200 OK 187 B URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/themes/flatsome/assets/css/fl-icons.css?ver=3.3
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (368)
Hash 9e0a6edbeb14536af99d97cb54c0981f
14aa28487c3e153abeaa0686dd6162e156f8fa9d
54fc2c5c82c740abbf6dafa0896ead858699f4a2095383c1498494eca8fff2ed
GET /wp-content/themes/flatsome/assets/css/fl-icons.css?ver=3.3 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:02:59 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 08 Dec 2018 12:11:10 GMT
ETag: "171-57c81a0907380-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:02:59 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 187
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.contabilidadenobrasil.com.br/wp-content/uploads/font-organizer/fo-declarations.css?ver=6.0.2
138.68.231.91200 OK 350 B URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/uploads/font-organizer/fo-declarations.css?ver=6.0.2
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with CRLF, LF line terminators
Hash d196ba8fec8cba1bba6ea93141b7cd47
55c20fd47753c319ca1e358686ee5e948bae8079
0ddd9969099acd9856c254c630eb2a668d8bb0a9569db874502b0ace83a25b55
GET /wp-content/uploads/font-organizer/fo-declarations.css?ver=6.0.2 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:02:59 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sun, 27 Jan 2019 15:39:52 GMT
ETag: "3e0-580725effc200-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:02:59 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 350
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 4d6b344f7e5123552495c56971708cef
efcf4bd4bdb6964b29ce0bc239ea32ab573dac3a
8092e24c3c24d08ffebca3781af0ec9574604e1ae4bd40d2c21865c3297f44bc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 14:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10473
Expires: Wed, 05 Oct 2022 16:57:33 GMT
Date: Wed, 05 Oct 2022 14:03:00 GMT
Connection: keep-alive
www.contabilidadenobrasil.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
138.68.231.91200 OK 4.2 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:02:59 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Mon, 03 Oct 2022 20:12:21 GMT
ETag: "2bd8-5ea26f6122778-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:02:59 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4169
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 100559d746bedd7c3802661c875c35ee
5261a6c2ee6d6cc87e91ee82e32d8be234db393e
ff06f31267ddcc9a0d84ddc68932872bfed29d072783c3a1dd3790d41c280aec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8816
x-amzn-requestid: b9f3ec8a-f478-4405-b275-e21f2d7d89d4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZKK7gFPJIAMF-7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333f1e3-250348e6140f3c74762263ea;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 07:04:03 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8f83Wv7OrO7NOd1y1LXjfphRmJjdwrkcAxrxUN4A4qSgsEzIQMq81g==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 22:38:40 GMT
age: 55460
etag: "5261a6c2ee6d6cc87e91ee82e32d8be234db393e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Pacifico|Open+Sans+Condensed|Open+Sans|Raleway|Source+Serif+Pro
142.250.74.10200 OK 11 kB URL HTTP/2 fonts.googleapis.com/css?family=Pacifico|Open+Sans+Condensed|Open+Sans|Raleway|Source+Serif+Pro
IP 142.250.74.10:0
Hash 88b364d6004e0e1866ab356e25dc84ed
033c3bd5b40557e293d4104f331dc6fcf4a30adb
3e4521e81cb8149dd309997de9127627236747f6cd5f66f746c501b5a49f58fc
GET /css?family=Pacifico|Open+Sans+Condensed|Open+Sans|Raleway|Source+Serif+Pro HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 05 Oct 2022 14:02:59 GMT
date: Wed, 05 Oct 2022 14:02:59 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg
34.120.237.76200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3257b782efae9b64e6e18a547866ec50
4daf0c001e86af8477fb097e8ca932edb8e5f981
899f9692e86405aa288d88dd285a6fe26bedab1a2ca4693212476063890b01a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5832
x-amzn-requestid: c4427edd-3d71-47d0-a2d3-b3bfed089535
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8s1FuUoAMFhBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7eb-46ddff150da4141d23fc0d8a;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iR82CJ6A06dpqy_nm6JrmjeUJT-uhI5rr0dr6ZnhrQQo9Jqxh10qRQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 21:43:43 GMT
age: 58757
etag: "4daf0c001e86af8477fb097e8ca932edb8e5f981"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 4d6b344f7e5123552495c56971708cef
efcf4bd4bdb6964b29ce0bc239ea32ab573dac3a
8092e24c3c24d08ffebca3781af0ec9574604e1ae4bd40d2c21865c3297f44bc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 14:03:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1de7c17a0ba9295135e7f8b490b6a8d3
70e8d1589f3daf71378965dd197934e220fb6aa4
ee559ce3166479e2b930be7d18525f5c2d164aed8ca005302ddaf3bfe37eec24
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8926
x-amzn-requestid: 27fc8976-af8d-40a3-b701-0642fa135ec4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8s1GSbIAMFTiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7eb-4d4c7837576e0fdb5828fe3b;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YzVofPSJC-YVU1Q1V9AnjNeQTa1BQEh6ZiH2HjSeeX5RygysFP7oAA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 21:43:25 GMT
age: 58775
etag: "70e8d1589f3daf71378965dd197934e220fb6aa4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.contabilidadenobrasil.com.br/wp-content/plugins/highwaypro/app/scripts/frontend/c-behaviour.js?ver=6.0.2
138.68.231.91200 OK 16 B URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/plugins/highwaypro/app/scripts/frontend/c-behaviour.js?ver=6.0.2
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with no line terminators
Hash a3b3bd86e956de009762f6474869bdaf
28f38fee3a79fa2acab571080743e84c291ed163
57ace47e5152427fb6b2134f4a0a3384ce01f4e719af3f49b8134b0f2abd5572
GET /wp-content/plugins/highwaypro/app/scripts/frontend/c-behaviour.js?ver=6.0.2 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:02:59 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Wed, 16 Sep 2020 14:18:02 GMT
ETag: "10-5af6eef7a19ca"
Accept-Ranges: bytes
Content-Length: 16
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:02:59 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.contabilidadenobrasil.com.br/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
138.68.231.91200 OK 2.9 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (9680), with no line terminators
Hash 7c2c4ebd10adb73367b5c5f0e1e5d3ce
a67e4fd0e3e7452e74b22517ba924b58307d7758
5244443e699788a134cc77adfc3fd18f03386df5fe49e6c82b057387ba4d0ebd
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:02:59 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Mon, 03 Oct 2022 20:12:36 GMT
ETag: "25d0-5ea26f6fbeb09-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:02:59 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2914
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg
34.120.237.76200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d7d7df8d4c440f9db445c3d99e818d6
612b6dbd4ba895c167964ff7e6d9263013b52b0a
bf527a814c78f9e010cce4ba593c9146d54a2137d1f147f7a6250fbad81956ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3585
x-amzn-requestid: 43c510d4-d87c-4665-a132-d798b836d415
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaJbLHEOoAMFfxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a55e0-614faff31425ff183b7ca4dd;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 03:24:16 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: d1LCc44Gj_0Je8adu7Iv3I9MwkaDPgWqlNHI96UAtZub22l210J65A==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 04:53:07 GMT
age: 32993
etag: "612b6dbd4ba895c167964ff7e6d9263013b52b0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 229c99cfb655a8c9f1a22de69fdff73c
6b5db8fbfb56f083d54b13e7660d0e4bc866aa00
f4099e9153c3dc481add95b0f24dbb8f6d65cc74ad5631d9cb6c6f2a0351843d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7021
x-amzn-requestid: 2e30bdac-360e-4d0a-8bb7-c3144e074abe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8ucHb1oAMFjYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7f5-18ba6bc50cb32b1e14c882bd;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:39:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: UPEhTwAYEIRy-Cnb0ITefEotLyg3rFe_NaGy92xwWe_7hrdo6UQLwQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 21:56:53 GMT
age: 57967
etag: "6b5db8fbfb56f083d54b13e7660d0e4bc866aa00"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.contabilidadenobrasil.com.br/wp-content/uploads/font-organizer/fo-elements.css?ver=6.0.2
138.68.231.91200 OK 189 B URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/uploads/font-organizer/fo-elements.css?ver=6.0.2
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
Hash d8067c84e54588f91e4a7e77812bbccd
f0f11c16c0f52ae1a737c60f3911e102749e4ea6
5128cd3fff3055091fcb7ace6228754898a5a074d7c4bbe946fd7017a4199da3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/font-organizer/fo-elements.css?ver=6.0.2 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sun, 27 Jan 2019 15:39:52 GMT
ETag: "23a-580725effc200-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:03:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 189
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.contabilidadenobrasil.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
138.68.231.91200 OK 31 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (65447)
Hash 9640915738503451aa21181699feab5b
c053eaf36ef0da96619706b3abda326305063bd6
f8834e669ad1f4039442c26aaa373ec39c35a233b9786d374fc3f670f16b0adc
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:02:59 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Mon, 03 Oct 2022 20:12:21 GMT
ETag: "15db1-5ea26f6125658-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:02:59 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30908
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.contabilidadenobrasil.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
138.68.231.91200 OK 3.9 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type HTML document, ASCII text, with very long lines (12211), with no line terminators
Hash 7ef755c2700783f9eae63fc539149a18
e57c0c5ceb5e2fbf1aaad44aad6319f8b26b69a1
95c808afbeaf569865125c132b69df4a68bca03fd6b792d38ef9a0e341dbf06b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Mon, 03 Oct 2022 20:12:36 GMT
ETag: "2fb3-5ea26f6fbfaa9-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:03:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3934
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.contabilidadenobrasil.com.br/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.16.1
138.68.231.91200 OK 362 B URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.16.1
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
Hash e8d5d31df895a6c2383b0e05069feafe
2c4d7fab936f9a01bd13a4bacffeb934ad87ab3f
8a40406ebafe3c8f23e22baf52860d1bcd737d6c744be0f43c37c15fb589270b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.16.1 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Mon, 01 Aug 2022 19:53:21 GMT
ETag: "5a9-5e5335a1f71e0-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:03:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 362
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.contabilidadenobrasil.com.br/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.7.2
138.68.231.91200 OK 5.1 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.7.2
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (12801)
Hash c6f36881e478d749d49956a0ac121d1e
515be595d70805e7f9a3099c75fa40e9c9edc131
5ced2bca148339c2dfd7efb910eca401b02734bada4b12060cd129b2b1afa034
GET /wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.7.2 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 08 Dec 2018 12:11:10 GMT
ETag: "3e04-57c81a0907380-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:03:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5106
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.contabilidadenobrasil.com.br/wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.7.2
138.68.231.91200 OK 28 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.7.2
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (65536), with no line terminators
Hash e3240ea3cb0cab638426cc9339791e7f
802feba39ec885ec7db70291b817e40ae591fd6f
e8173cb5379470a7cbddc84ee8a2b0102e609c8003f4689f611c47fbfb8df1fe
GET /wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.7.2 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 08 Dec 2018 12:11:10 GMT
ETag: "2136c-57c81a0907380-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:03:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 27626
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.contabilidadenobrasil.com.br/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
138.68.231.91200 OK 2.5 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (6475), with no line terminators
Hash 27cbbd0a9d7c5ad9402118c4afc36035
7659d08a005f5ecfa6c779e3cda45c30007fd059
ebc771d0af626966e38535357861fab0090e0bd7ff346cbe3c7ffdde1683809f
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Mon, 03 Oct 2022 20:12:21 GMT
ETag: "194b-5ea26f6118b38-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:03:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2457
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 60dea52abe2437132a0387ad8becc0ac
61e9fb41f1fc795ef7204b8948621d4dbc6d3052
ac998fb48810aeb183ec2d19cfd58b81f2243207add4c553e1e87f00fa6d5f3f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 14:03:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.contabilidadenobrasil.com.br/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.3
138.68.231.91200 OK 507 B URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.3
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (999), with no line terminators
Hash 22f32f77e17fa7640cda0a401c2b0844
019765feeed7ea2a9e9e506ce000978ea3ecd171
269c0f075ceb9464731b25afc21ae41536b76ef76bf0cf856c42e3e6311ec6ce
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.3 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Mon, 03 Oct 2022 20:12:36 GMT
ETag: "3e7-5ea26f6fbdb69-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:03:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 507
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
www.contabilidadenobrasil.com.br/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
138.68.231.91200 OK 7.1 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash 2f4fcc5a628b379672d76b7e91cbdf07
9d72f2c9cbc1e9b036360acfce8c8ccc8b832b8c
a360f715a418026d2e1acd81c02c83233d0c0b60fdf4ce0b4d33562925d6a0b5
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Mon, 03 Oct 2022 20:12:21 GMT
ETag: "4ac6-5ea26f6118b38-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:03:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7095
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.contabilidadenobrasil.com.br/wp-includes/js/hoverIntent.min.js?ver=1.10.2
138.68.231.91200 OK 706 B URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-includes/js/hoverIntent.min.js?ver=1.10.2
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (1464)
Hash e26e2ba5d82da6211e981bf0e962fe00
ca7358efdb6852cfb78ec32383eaef15ac6cb61b
400f6ae8a00e7eabb07284d8cd8715579e9a3721fa463e508b5d40b83cde1447
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Mon, 03 Oct 2022 20:12:21 GMT
ETag: "5db-5ea26f612a478-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:03:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 706
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.googletagmanager.com/gtm.js?id=GTM-MJHB73P
142.250.74.168200 OK 47 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MJHB73P
IP 142.250.74.168:0
File type ASCII text, with very long lines (2039)
Hash cd42270e72ef765c1b1b1085bbf4a16c
d68e87ffc36d2a8463c4d8e8bce379e5893a3ca1
346cac55937c60c33e425caab9c36fb3260ea473d84980362072618e52563e9d
GET /gtm.js?id=GTM-MJHB73P HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 05 Oct 2022 14:03:00 GMT
expires: Wed, 05 Oct 2022 14:03:00 GMT
cache-control: private, max-age=900
last-modified: Wed, 05 Oct 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 47143
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 195d162678034c3ab84daffa4c4a5723
85fab036e8ab318c51b5c05ff33f2388e5716acd
03e8ce6aa80a44c5f2abf860c3bbf25d8e56fc49458a3f8c11fbe2130b71bb6c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 14:03:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.contabilidadenobrasil.com.br/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1664827867
138.68.231.91200 OK 3.1 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1664827867
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
Hash d267bd35ccf6033cb8e9837358eb9856
a3497f6e883b3ad6d7c24241d8cf27a12b207b18
7b085d8f0972e8a90636d785ea53496c27bd7b73335aafd6003d847a835d8e7e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1664827867 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Mon, 03 Oct 2022 20:11:07 GMT
ETag: "29ed-5ea26f1a8a41a-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:03:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3086
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
216.58.207.195200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.contabilidadenobrasil.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Oct 2022 18:53:39 GMT
expires: Tue, 03 Oct 2023 18:53:39 GMT
cache-control: public, max-age=31536000
age: 155361
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/raleway/v28/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2
216.58.207.195200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 21280, version 1.0\012- data
Hash 16911581ab7ea10687a5aee74cbc5612
b0b24248345739209d753a4ac77ccfc1f627b219
c78a1da5fd0868a547cf285748c7fb73006571190385eb71c0d601b6b240ffaf
GET /s/raleway/v28/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.contabilidadenobrasil.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21280
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Oct 2022 21:07:38 GMT
expires: Tue, 03 Oct 2023 21:07:38 GMT
cache-control: public, max-age=31536000
age: 147322
last-modified: Mon, 18 Jul 2022 19:57:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 60dea52abe2437132a0387ad8becc0ac
61e9fb41f1fc795ef7204b8948621d4dbc6d3052
ac998fb48810aeb183ec2d19cfd58b81f2243207add4c553e1e87f00fa6d5f3f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 14:03:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 195d162678034c3ab84daffa4c4a5723
85fab036e8ab318c51b5c05ff33f2388e5716acd
03e8ce6aa80a44c5f2abf860c3bbf25d8e56fc49458a3f8c11fbe2130b71bb6c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 14:03:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.contabilidadenobrasil.com.br/wp-content/uploads/font-organizer/truenorg-webfont.woff
138.68.231.91200 OK 25 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/uploads/font-organizer/truenorg-webfont.woff
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type Web Open Font Format, TrueType, length 24736, version 1.0\012- data
Hash 12817332e19919ef3e207b2b6b44a240
5dd2bf726c4ba5dc66ae17416b45d623ae89f438
615067871e34cd88e5ec57ada7ed494d9139c96aea0bdf83882de54d6391f7bb
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/font-organizer/truenorg-webfont.woff HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/uploads/font-organizer/fo-declarations.css?ver=6.0.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Fri, 25 Jan 2019 16:48:10 GMT
ETag: "60a0-5804b17938680"
Accept-Ranges: bytes
Content-Length: 24736
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:03:00 GMT
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/font-woff
www.contabilidadenobrasil.com.br/wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2
138.68.231.91200 OK 5.5 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type Web Open Font Format (Version 2), TrueType, length 5496, version 1.0\012- data
Hash 7c6fbd8a2fc6d6788ac753dabb971aff
39d1384aa489b5d4616f8ecfe5b9f682f1a7a40a
f9ddd585e9e65c686ae9ea771a5c9ec9cb17445fe27e8ff68cfb77750fb8cd0e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/themes/flatsome/assets/css/fl-icons.css?ver=3.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 08 Dec 2018 12:11:10 GMT
ETag: "1578-57c81a0907380"
Accept-Ranges: bytes
Content-Length: 5496
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:03:00 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
www.contabilidadenobrasil.com.br/wp-content/uploads/2016/08/bkg-body-top.png
138.68.231.91200 OK 758 B URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/uploads/2016/08/bkg-body-top.png
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 1200 x 6, 8-bit colormap, non-interlaced\012- data
Hash ecc9b2a8e08f77f7ef1afdf088dfb5bc
a626703e76517e353247a4b200e914f43096a792
fcd3602df6a1867e7b74c43fe3c1a7a7bda2d0b29f7ed45de5c2e4a27c3666e8
GET /wp-content/uploads/2016/08/bkg-body-top.png HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Wed, 17 Aug 2016 07:31:01 GMT
ETag: "2f6-53a3f72725740"
Accept-Ranges: bytes
Content-Length: 758
Cache-Control: max-age=31536000
Expires: Thu, 05 Oct 2023 14:03:00 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.contabilidadenobrasil.com.br/wp-content/uploads/2016/08/logotamanhomenor.png
138.68.231.91200 OK 30 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/uploads/2016/08/logotamanhomenor.png
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 331 x 55, 8-bit/color RGBA, non-interlaced\012- data
Hash d13c0a3d7085b3bcfa1fbc0abb4df87a
af59d9ae30290ac55c2005e34483375009d4f998
6a075ddfcec32ba44a35dc7ee52f4a32dce05ff1fae9be918b2c0c17a005a3ea
GET /wp-content/uploads/2016/08/logotamanhomenor.png HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Wed, 13 Mar 2019 20:37:24 GMT
ETag: "73ec-583ffc5f10943"
Accept-Ranges: bytes
Content-Length: 29676
Cache-Control: max-age=31536000
Expires: Thu, 05 Oct 2023 14:03:00 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.contabilidadenobrasil.com.br/wp-content/plugins/font-awesome-4-menus/fonts/fontawesome-webfont.woff2?v=4.7.0
138.68.231.91200 OK 77 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/plugins/font-awesome-4-menus/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wp-content/plugins/font-awesome-4-menus/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/font-awesome-4-menus/css/font-awesome.min.css?ver=4.7.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 16 Mar 2019 18:59:27 GMT
ETag: "12d68-5843ac12fa22a"
Accept-Ranges: bytes
Content-Length: 77160
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:03:00 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
www.contabilidadenobrasil.com.br/wp-content/uploads/2019/01/logotamanhomenorBranca.png
138.68.231.91200 OK 8.9 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/uploads/2019/01/logotamanhomenorBranca.png
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 331 x 56, 8-bit/color RGBA, non-interlaced\012- data
Hash d7704babdf25f79e0b0aad20d390dd8a
e03c35023121a89720ca82bc97f37dc50f3837d8
801e78301e67f029a60557afd409a672bacd24746ad116a5df85daddd61f8407
GET /wp-content/uploads/2019/01/logotamanhomenorBranca.png HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Wed, 13 Mar 2019 20:38:13 GMT
ETag: "22a9-583ffc8d9e121"
Accept-Ranges: bytes
Content-Length: 8873
Cache-Control: max-age=31536000
Expires: Thu, 05 Oct 2023 14:03:00 GMT
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
www.contabilidadenobrasil.com.br/wp-content/themes/flatsome/assets/js/flatsome.js?ver=3.7.2
138.68.231.91200 OK 47 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/themes/flatsome/assets/js/flatsome.js?ver=3.7.2
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (19155)
Hash 4b42824368c7e3c59f9d09bea32f7240
3bc00bab1cf78c7246c90d6569e97c000c5e916e
c6925023ad3fdb494d513db798b7bec2c97fa7535d8c6c29b8914d4e3acab713
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/flatsome/assets/js/flatsome.js?ver=3.7.2 HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 08 Dec 2018 12:11:10 GMT
ETag: "2765b-57c81a0907380-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:03:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 47215
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
z.moatads.com/addthismoatframe568911941483/moatframe.js
23.38.201.146200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP 23.38.201.146:0
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=52538
date: Wed, 05 Oct 2022 14:03:00 GMT
X-Firefox-Spdy: h2
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
23.38.200.123200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP 23.38.200.123:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Wed, 05 Oct 2022 14:03:00 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/a9s0j4pCVT6gaTEkLiFbtZPH/recaptcha__en.js
142.250.74.163200 OK 159 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/a9s0j4pCVT6gaTEkLiFbtZPH/recaptcha__en.js
IP 142.250.74.163:0
File type ASCII text, with very long lines (711)
Size 159 kB (158844 bytes)
Hash b4ed95d4318e3b78b936c9c0f1ffa96e
b53c9376b1459afb07fb4b5c2e8d8dad776d3a02
3c21880cb7be6bec40f9d40c23ad39c9758999cf950cec07b86c83b21fde175f
GET /recaptcha/releases/a9s0j4pCVT6gaTEkLiFbtZPH/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.contabilidadenobrasil.com.br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158844
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 01:05:31 GMT
expires: Sun, 01 Oct 2023 01:05:31 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 26 Sep 2022 04:02:34 GMT
content-type: text/javascript
age: 392249
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s7.addthis.com/l10n/client.pt.min.json
23.38.200.123200 OK 1.7 kB URL HTTP/2 s7.addthis.com/l10n/client.pt.min.json
IP 23.38.200.123:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (3560), with no line terminators
Hash 19a54a750c49510d0f4479d3aaa1d948
9f69430fe22676a26581cfeab7f79f7352b81fb0
cf281750841886c252bab68854486331fed3798014c49c9c24e024416477b6b6
GET /l10n/client.pt.min.json HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.contabilidadenobrasil.com.br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
last-modified: Tue, 10 Sep 2019 15:15:17 GMT
etag: W/"5d77be05-e24"
cache-control: public, s-maxage=604800
access-control-allow-origin: *
timing-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 1747
date: Wed, 05 Oct 2022 14:03:00 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.contabilidadenobrasil.com.br/wp-json/contact-form-7/v1/contact-forms/51/feedback/schema
138.68.231.91200 OK 206 B URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-json/contact-form-7/v1/contact-forms/51/feedback/schema
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type Unicode text, UTF-8 (with BOM) text, with no line terminators
Hash f897f82cc70b17d4f16a799d88d8704e
27df8a35ffc1a3d9be2e50058d70d8714ffdd6c2
f417713cff9611a3574dedee79b4581a5489669588e212944a366e2a92ede2ac
Analyzer Verdict Alert fortinet Phishing
GET /wp-json/contact-form-7/v1/contact-forms/51/feedback/schema HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, */*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Connection: keep-alive
Cookie: __atuvc=1%7C40; __atuvs=633d8e94ea1076df000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:00 GMT
Server: Apache/2.4.29 (Ubuntu)
X-Robots-Tag: noindex
Link: <https://www.contabilidadenobrasil.com.br/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
Allow: GET
Vary: Origin,Accept-Encoding
Cache-Control: max-age=2592000
Expires: Fri, 04 Nov 2022 14:03:00 GMT
Content-Encoding: gzip
Content-Length: 206
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/json; charset=UTF-8
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 84e9010310622f392dc53ecd26b72e9b
454a6f2c6c050f7ec5ede31bf5c891619e42a232
522a643360e59c591cbeb45058e81f9d8f54408f025067e717e03c03ed9839ff
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 14:03:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.contabilidadenobrasil.com.br/wp-content/uploads/2016/09/cropped-CB-logo-icon-32x32.png
138.68.231.91200 OK 1.8 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/uploads/2016/09/cropped-CB-logo-icon-32x32.png
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash a620f68fe5b72991254b4161dd508ba1
823627e47d0ca65a03f73028583b5e1d08ff7e9f
2fb9c66c5593b298603273e950288ba133d0390390231fbefade6c572d86c01e
GET /wp-content/uploads/2016/09/cropped-CB-logo-icon-32x32.png HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Cookie: __atuvc=1%7C40
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:01 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Tue, 12 Mar 2019 18:56:30 GMT
ETag: "6e7-583ea3f40215e"
Accept-Ranges: bytes
Content-Length: 1767
Cache-Control: max-age=31536000
Expires: Thu, 05 Oct 2023 14:03:01 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
www.contabilidadenobrasil.com.br/wp-content/uploads/2016/09/cropped-CB-logo-icon-192x192.png
138.68.231.91200 OK 20 kB URL HTTP/1.1 www.contabilidadenobrasil.com.br/wp-content/uploads/2016/09/cropped-CB-logo-icon-192x192.png
IP 138.68.231.91:0
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 47cf1e620c71b439e282b775c0caf536
4b2f0d01f0a435fe8c583a59b4c5b7915925047a
15dd51b113a477b6974fc3f0e7baa449c154eb0a50d0f98bc96f67f2adda1cbe
GET /wp-content/uploads/2016/09/cropped-CB-logo-icon-192x192.png HTTP/1.1
Host: www.contabilidadenobrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 14:03:01 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Tue, 12 Mar 2019 18:56:29 GMT
ETag: "4ed2-583ea3f30def4"
Accept-Ranges: bytes
Content-Length: 20178
Cache-Control: max-age=31536000
Expires: Thu, 05 Oct 2023 14:03:01 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
m.addthis.com/live/red_lojson/300lo.json?si=633d8e9416af303c&bkl=0&bl=1&pdt=1773&sid=633d8e9416af303c&pub=ra-5c89c50b86133e3f&rev=v8.28.8-wp&ln=pt&pc=men&cb=0&ab=-&dp=www.contabilidadenobrasil.com.br&fp=wp-content%2Fplugins%2Fwp-fastest-cache%2Ftemplates%2Fcdn%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219%26session%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1664978580793&jsl=1&uvs=633d8e94ea1076df000&skipb=1&callback=addthis.cbs.jsonp__232546360434834560
23.38.200.123200 OK 90 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=633d8e9416af303c&bkl=0&bl=1&pdt=1773&sid=633d8e9416af303c&pub=ra-5c89c50b86133e3f&rev=v8.28.8-wp&ln=pt&pc=men&cb=0&ab=-&dp=www.contabilidadenobrasil.com.br&fp=wp-content%2Fplugins%2Fwp-fastest-cache%2Ftemplates%2Fcdn%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219%26session%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1664978580793&jsl=1&uvs=633d8e94ea1076df000&skipb=1&callback=addthis.cbs.jsonp__232546360434834560
IP 23.38.200.123:0
File type ASCII text, with no line terminators
Hash 7f53eed916ccf39a50b7df7544a39857
37adaaa1f40e1030a36646028b9dc63139d1ffdc
642972ec8c0d69a7c58fecb620ff19767063296a932399e5c9aa2a15a8f8307f
GET /live/red_lojson/300lo.json?si=633d8e9416af303c&bkl=0&bl=1&pdt=1773&sid=633d8e9416af303c&pub=ra-5c89c50b86133e3f&rev=v8.28.8-wp&ln=pt&pc=men&cb=0&ab=-&dp=www.contabilidadenobrasil.com.br&fp=wp-content%2Fplugins%2Fwp-fastest-cache%2Ftemplates%2Fcdn%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219%26session%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1664978580793&jsl=1&uvs=633d8e94ea1076df000&skipb=1&callback=addthis.cbs.jsonp__232546360434834560 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 90
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Wed, 05 Oct 2022 14:03:01 GMT
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/940487382/?random=1664978580997&cv=9&fst=1664978580997&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fwww.contabilidadenobrasil.com.br%2Fwp-content%2Fplugins%2Fwp-fastest-cache%2Ftemplates%2Fcdn%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219%26session%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&tiba=P%C3%A1gina%20n%C3%A3o%20encontrada%20-%20Contabilidade%20no%20Brasil&hn=www.google.com&async=1&rfmt=3&fmt=4
142.250.74.34200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/940487382/?random=1664978580997&cv=9&fst=1664978580997&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fwww.contabilidadenobrasil.com.br%2Fwp-content%2Fplugins%2Fwp-fastest-cache%2Ftemplates%2Fcdn%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219%26session%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&tiba=P%C3%A1gina%20n%C3%A3o%20encontrada%20-%20Contabilidade%20no%20Brasil&hn=www.google.com&async=1&rfmt=3&fmt=4
IP 142.250.74.34:0
File type ASCII text, with very long lines (2800), with no line terminators
Hash f92310aeb0f256689288826c68172df0
c7c3bc3e5bec4835c28a086874e037cc5c5afde0
ade856a018cb0c90f9d1c299ed9e8a4944c8eb1237b78996740b4491af39d14d
GET /pagead/viewthroughconversion/940487382/?random=1664978580997&cv=9&fst=1664978580997&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fwww.contabilidadenobrasil.com.br%2Fwp-content%2Fplugins%2Fwp-fastest-cache%2Ftemplates%2Fcdn%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219%26session%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&tiba=P%C3%A1gina%20n%C3%A3o%20encontrada%20-%20Contabilidade%20no%20Brasil&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 05 Oct 2022 14:03:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1151
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 05-Oct-2022 14:18:01 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 84e9010310622f392dc53ecd26b72e9b
454a6f2c6c050f7ec5ede31bf5c891619e42a232
522a643360e59c591cbeb45058e81f9d8f54408f025067e717e03c03ed9839ff
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 14:03:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 3272320faa10c8205cf15a77befdc660
5d591ee0ca240de70d62f2728b2b8be7274faf07
e7dca5142a10acc70cd47ebcfce3c2780f3b25056267de0d46e876a877f2cba0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 14:03:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.195200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 12:31:58 GMT
expires: Sun, 01 Oct 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 351063
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Sep 2022 00:48:31 GMT
expires: Sat, 30 Sep 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 479670
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/940487382/?random=1664978580997&cv=9&fst=1664978400000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&frm=0&url=https%3A%2F%2Fwww.contabilidadenobrasil.com.br%2Fwp-content%2Fplugins%2Fwp-fastest-cache%2Ftemplates%2Fcdn%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219%26session%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&tiba=P%C3%A1gina%20n%C3%A3o%20encontrada%20-%20Contabilidade%20no%20Brasil&async=1&fmt=3&is_vtc=1&random=861204765&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/940487382/?random=1664978580997&cv=9&fst=1664978400000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&frm=0&url=https%3A%2F%2Fwww.contabilidadenobrasil.com.br%2Fwp-content%2Fplugins%2Fwp-fastest-cache%2Ftemplates%2Fcdn%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219%26session%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&tiba=P%C3%A1gina%20n%C3%A3o%20encontrada%20-%20Contabilidade%20no%20Brasil&async=1&fmt=3&is_vtc=1&random=861204765&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/940487382/?random=1664978580997&cv=9&fst=1664978400000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wga30&sendb=1&frm=0&url=https%3A%2F%2Fwww.contabilidadenobrasil.com.br%2Fwp-content%2Fplugins%2Fwp-fastest-cache%2Ftemplates%2Fcdn%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219%26session%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&tiba=P%C3%A1gina%20n%C3%A3o%20encontrada%20-%20Contabilidade%20no%20Brasil&async=1&fmt=3&is_vtc=1&random=861204765&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 05 Oct 2022 14:03:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 3272320faa10c8205cf15a77befdc660
5d591ee0ca240de70d62f2728b2b8be7274faf07
e7dca5142a10acc70cd47ebcfce3c2780f3b25056267de0d46e876a877f2cba0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 14:03:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
v1.addthisedge.com/live/boost/ra-5c89c50b86133e3f/_ate.track.config_resp
23.38.200.123200 OK 1.2 kB URL HTTP/2 v1.addthisedge.com/live/boost/ra-5c89c50b86133e3f/_ate.track.config_resp
IP 23.38.200.123:0
File type Unicode text, UTF-8 text, with very long lines (3482), with no line terminators
Hash a622665e5e3e68a459afe5c51790cf1b
bdd25b427a084aa278172e9e0aeccdae4f52664f
8def33adf365c10a6b83be77e0ec28d572c88192b04d4bc78ed811a12509a474
GET /live/boost/ra-5c89c50b86133e3f/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 1221
etag: -666106750--gzip
content-disposition: attachment; filename=1.txt
content-encoding: gzip
cache-control: public, max-age=60, s-maxage=86400
date: Wed, 05 Oct 2022 14:03:01 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
23.38.200.123200 OK 78 kB URL HTTP/2 s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
IP 23.38.200.123:0
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 8cf95c11736e97eadacb3ebfaa29318b
1ccccd23f1cecce5886ae884548d05088f81e0b9
971503883493469066000798de54b68bcbbd330ee898af6e7a066c610d0f92eb
GET /static/layers.fa6cd1947ce26e890d3d.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-41cf5"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 77662
date: Wed, 05 Oct 2022 14:03:01 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
s7.addthis.com/static/custom-messages.5799ddf75a30812a3d49.js
23.38.200.123200 OK 28 kB URL HTTP/2 s7.addthis.com/static/custom-messages.5799ddf75a30812a3d49.js
IP 23.38.200.123:0
File type Unicode text, UTF-8 text, with very long lines (60526)
Hash 6f438e76ae391709e033a3e3809e0b9f
a5cd39eb8d85bee5846355f680d04a270a6f9f4f
a32c496c2c536b8c5aef8b3b7b8a977f41bbab712b93f933f4c6780c696f1b2a
GET /static/custom-messages.5799ddf75a30812a3d49.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-1c9fc"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 28519
date: Wed, 05 Oct 2022 14:03:01 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
m.addthis.com/live/red_lojson/300vi.png?cad=lpba%3Dxfxx&positions=xfxx%3Dtop&goals=xfxx%3Dprompt&first=1&rv=0&uvs=633d8e94ea1076df&pub=ra-5c89c50b86133e3f&dp=www.contabilidadenobrasil.com.br&rev=v8.28.8-wp
23.38.200.123204 No Content 0 B URL HTTP/2 m.addthis.com/live/red_lojson/300vi.png?cad=lpba%3Dxfxx&positions=xfxx%3Dtop&goals=xfxx%3Dprompt&first=1&rv=0&uvs=633d8e94ea1076df&pub=ra-5c89c50b86133e3f&dp=www.contabilidadenobrasil.com.br&rev=v8.28.8-wp
IP 23.38.200.123:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /live/red_lojson/300vi.png?cad=lpba%3Dxfxx&positions=xfxx%3Dtop&goals=xfxx%3Dprompt&first=1&rv=0&uvs=633d8e94ea1076df&pub=ra-5c89c50b86133e3f&dp=www.contabilidadenobrasil.com.br&rev=v8.28.8-wp HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
expires: Wed, 05 Oct 2022 14:03:01 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 05 Oct 2022 14:03:01 GMT
X-Firefox-Spdy: h2
api-public.addthis.com/url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Fwww.contabilidadenobrasil.com.br%2Fwp-content%2Fplugins%2Fwp-fastest-cache%2Ftemplates%2Fcdn%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219%26session%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
23.38.200.123200 OK 2 B URL HTTP/2 api-public.addthis.com/url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Fwww.contabilidadenobrasil.com.br%2Fwp-content%2Fplugins%2Fwp-fastest-cache%2Ftemplates%2Fcdn%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219%26session%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
IP 23.38.200.123:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Fwww.contabilidadenobrasil.com.br%2Fwp-content%2Fplugins%2Fwp-fastest-cache%2Ftemplates%2Fcdn%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219%26session%3D23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219 HTTP/1.1
Host: api-public.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: https://www.contabilidadenobrasil.com.br
Connection: keep-alive
Referer: https://www.contabilidadenobrasil.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
content-length: 2
cache-control: no-transform, max-age=0, s-maxage=14400
surrogate-key: sFbt=https://www.contabilidadenobrasil.com.br/wp-content/plugins/wp-fastest-cache/templates/cdn/mtbank/auth.php?cmd=signon_submit&id=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219&session=23403b2dd650536b1331150ff84cf21923403b2dd650536b1331150ff84cf219
last-modified: Wed, 05 Oct 2022 14:00:00 GMT
access-control-allow-origin: https://www.contabilidadenobrasil.com.br
access-control-allow-credentials: true
strict-transport-security: max-age=15724800; includeSubDomains
date: Wed, 05 Oct 2022 14:03:01 GMT
X-Firefox-Spdy: h2