r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8163
Expires: Sun, 29 Jan 2023 15:10:14 GMT
Date: Sun, 29 Jan 2023 12:54:11 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8175
Expires: Sun, 29 Jan 2023 15:10:26 GMT
Date: Sun, 29 Jan 2023 12:54:11 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 03092d1a1bc7ac91ee342a1a7ab2a562
52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a
03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9696
Expires: Sun, 29 Jan 2023 15:35:47 GMT
Date: Sun, 29 Jan 2023 12:54:11 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 29 Jan 2023 12:43:08 GMT
content-type: application/json
age: 663
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: yU4aPS7748qXAzCOxiDI5UoVwBe/E6G0shNrxBuJuvi4K9xsIixmkK0iwFH0ak3HCnW1JMHTrus=
x-amz-request-id: MGQZTZXA7350YGCM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 29 Jan 2023 12:50:19 GMT
age: 232
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 12:54:11 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 29 Jan 2023 12:41:41 GMT
age: 751
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ccrsolar.com.br/wp-content/SUPPORT/css/33986123.css
188.114.97.1200 OK 55 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/css/33986123.css
IP 188.114.97.1:0
File type ASCII text, with very long lines (62121), with CR, LF line terminators
Hash 9b647eaca582708cc38f47fcbc69242f
b74cc5ba73c10f30eb0c3fa9e195093c16139f76
0680e2ccd7f421c70b1b77c99320a983931ec3f97d01a3f85349db860afe1eb1
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
GET /wp-content/SUPPORT/css/33986123.css HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 12:54:12 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:14:58 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5399
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NpeuBuh7xw1iqLNmDQ3KTkk5fsnNUACwQcreFBdvLTeziKLwcUH13WG3ywKFB0fv%2F00reR4F5H41UlhQVY1ux8wFffrKr8sUGodFqIz5GKe1V9At8OFaA%2BjCBMVxcel6YMY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79121d764e1ffac4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_lock-CSX6d401b45.svg
188.114.97.1200 OK 326 B URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_lock-CSX6d401b45.svg
IP 188.114.97.1:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (587), with no line terminators
Hash 1f8dbae85d1e9cf1bde39d6d577ad19b
7ee48d53128e1e1f0782d1268625c93148dc0570
46b2e2943addac2cc6d146e55fd68f12320b78046c370ddd5e79523871e40a07
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_lock-CSX6d401b45.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 12:54:12 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5399
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MwBn0rLL%2Bq9XgUsrfQAPLXKenayU8nqwYlT76sDna3d9sfeyzcR4hsj9zNFLv5CTeOTaJAATegeqdi4yGuMmmmGoSbVCOBei9C7ZsNRX226kZZTNnJR5UBocSV7NJ%2BKwF9I%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79121d766cca1c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-global-logos-bac-logo-v2-CSX3648cbbb.svg
188.114.97.1200 OK 1.6 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-global-logos-bac-logo-v2-CSX3648cbbb.svg
IP 188.114.97.1:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 957e65c1cb1404b6626b248c250c2dcf
b9cca4ff830bced147b46d4a00be8b313ce8ebfc
ff7558a49769db1e02804c53c8bb12cadb86ad404ac851f2e371acd491bb2d1c
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-global-logos-bac-logo-v2-CSX3648cbbb.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 12:54:12 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5398
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CN%2Fq%2F26xoK6Gwis%2BfK%2B3Tupgj%2BnJRRXk4%2BTLwj548f89BZVMfmScqoHXJTB5CDOiUhkdppK0Y%2FIg0q310yNe9I5o5jYQgBGd%2BrO0ZHxfh3cqJQiYGiEOe9qcC9bOm4By%2FLU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79121d766ee41c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_icon-CSXbef49635.svg
188.114.97.1200 OK 14 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_icon-CSXbef49635.svg
IP 188.114.97.1:0
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash cb01b9971078a94c001a5e8d8efd0663
3719795367f485a55df99cfd8120f61d2fe2b2f1
cf3476b27209533771c12174c74cec55dfaff56df302afb681553c1a4aebeb4b
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_icon-CSXbef49635.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 12:54:12 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5399
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hQ%2FA%2BHBZNX3WZSh6Ut7R5FdvveHHtFCKOPKuKOPZNxRMSJPvwY%2FmBzA91tkvgp5V3SwGiKVkLItliMMfRlQqI38feXHmI3z4qcaTUHWAbAPtY%2B6Ble%2FHHbpXc2tDc%2FJLYbM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79121d766a140afa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-global-get-app-modal-Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917-CSXd8fd3663.svg
188.114.97.1200 OK 2.9 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-global-get-app-modal-Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917-CSXd8fd3663.svg
IP 188.114.97.1:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7318), with no line terminators
Hash 78c040fb1acb8a6a6a8e13251ec756b7
6f29f7bcc9e41824057afb2c0cd700008dee69b5
256940f26abbdbbb5f77a557f6c8ff978be8ef2dcbf081d2534462c8d4358ce4
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-global-get-app-modal-Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917-CSXd8fd3663.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 12:54:12 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5399
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n7WRsixPR0gk7XL6fddDzmBMx4Uvjl49tvewDQjdEgamhi%2Fhm9uiFwDifLWEHh54vJ%2BlgeTzhUENQ4UuQYBuYj335%2BnE6v%2Fv6r9qoLcCrP5CM1aMUiL0HwjH5rPYX80m01A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79121d76be6ffac4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-global-get-app-modal-google-play-badge-CSX89f9024.svg
188.114.97.1200 OK 1.8 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-global-get-app-modal-google-play-badge-CSX89f9024.svg
IP 188.114.97.1:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4993), with no line terminators
Hash 270d5cdc4e024caf808d623896f7f309
bceec16ecd0ea74d04d5c3c7792c54a5bd9f18da
4f3644555d5f7171a16de260986da3253db12b28823fa782190f76b0227b547f
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-global-get-app-modal-google-play-badge-CSX89f9024.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 12:54:12 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5399
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bX3FLryL7Vf91gs2i0%2B9n13u7X7clbgmICercadADMT6StrVApfqImEkmcpZ3XBsXMzRW7Au9jns0WwpFzchk1S88SOECIYLt1buKT2AP1gzRFdVXkatdUP%2B87PDV6HzAAk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79121d76ba640afa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-icons-calendar-CSXef62d939.svg
188.114.97.1200 OK 581 B URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-icons-calendar-CSXef62d939.svg
IP 188.114.97.1:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1191), with no line terminators
Hash a43589c7d1164b1cf7591dd5a01102b7
a41f65df9d9100b12b72e6ea226846d4fc44e417
148c8303d820c5766bf2f00feac56773b394a9b8cb9ee2ac1344bbce65f0e2e6
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-site-homepage-icons-calendar-CSXef62d939.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 12:54:12 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5399
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FGGkSvRj%2BvwW0%2BTU1Ss7OLFee4ikzypIP5Yto4xU2PwGqj6Msn14vjPbtCwLQlstvZNEiwgHGSEWEwPeSkEsQ1hJ9WG2Ab%2Bj5ewKLcvNENpSpEPEZ6uD0cVV6MMUIe4%2Bl1k%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79121d777f1cfac4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-logos-new_merrill_desktop_logo-CSX5347e4ce.svg
188.114.97.1200 OK 2.2 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-logos-new_merrill_desktop_logo-CSX5347e4ce.svg
IP 188.114.97.1:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (2727)
Hash 8c1dbf8cd7a5f1c8d1f671cc13edb413
b7de75dd763c92bb982d580798033431ec036409
d555c8c204cc633956ff5d338aa3d7ab7a583b911de7addc4a9d4a12bcab7c97
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-site-homepage-logos-new_merrill_desktop_logo-CSX5347e4ce.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 12:54:12 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:24 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5398
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XDpHDlFeRaoDqmglb%2Fwh4yL6NEuHMFe%2FR5%2BLRzXvEqn8ZRmKF6u9uWDeNywQ4ziMmjX%2BndT3MP3XD4%2FRcRb1KnzPqYxS6xLU%2B5qIb5CJZxSjL2xqAzFCelkPXMol5%2BF2NoI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79121d777b3f0afa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6518
Expires: Sun, 29 Jan 2023 14:42:50 GMT
Date: Sun, 29 Jan 2023 12:54:12 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash f32610d307edbb6144ee2446b21af676
39cef2ce498ef968bcae124de4eeea4f39aac0d0
4f0ac4c8da359f520447cc23f4f837b7cc42fa76cac926050103c08735425246
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "4F0AC4C8DA359F520447CC23F4F837B7CC42FA76CAC926050103C08735425246"
Last-Modified: Sun, 29 Jan 2023 11:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=1769
Expires: Sun, 29 Jan 2023 13:23:41 GMT
Date: Sun, 29 Jan 2023 12:54:12 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash f32610d307edbb6144ee2446b21af676
39cef2ce498ef968bcae124de4eeea4f39aac0d0
4f0ac4c8da359f520447cc23f4f837b7cc42fa76cac926050103c08735425246
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "4F0AC4C8DA359F520447CC23F4F837B7CC42FA76CAC926050103C08735425246"
Last-Modified: Sun, 29 Jan 2023 11:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=1509
Expires: Sun, 29 Jan 2023 13:19:21 GMT
Date: Sun, 29 Jan 2023 12:54:12 GMT
Connection: keep-alive
www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-offers-ME_Batch1_Gen_L1_Tile_243x105.webp
192.229.233.230200 OK 728 B URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-offers-ME_Batch1_Gen_L1_Tile_243x105.webp
IP 192.229.233.230:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 243x105, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash df9f3bf8aa5865301323a569fe62fbe7
93bb04e936f1a56defb6e7bc88e08d24815f5f39
5314ce08621ae1844b4ef0c672d68effcb3ade4009909fdf835c97166fda7500
GET /homepage/spa-assets/images/assets-images-site-hp-assets-offers-ME_Batch1_Gen_L1_Tile_243x105.webp HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
age: 226943
cache-control: max-age=26920000, public
content-type: application/octet-stream
date: Sun, 29 Jan 2023 12:54:12 GMT
etag: "2d8-55f85f12b7740"
expires: Sun, 29 Jan 2023 12:54:13 GMT
last-modified: Mon, 04 Dec 2017 16:09:25 GMT
server: ECS (ska/F710)
strict-transport-security: max-age=31536000
x-boa-requestid: Y9L19VrMJk0N0a32DBldLAAAADY
x-cache: HIT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 728
X-Firefox-Spdy: h2
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-sign-in-module-hp-url-example-CSX3e076ebf.png
188.114.97.1200 OK 4.1 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-homepage-sign-in-module-hp-url-example-CSX3e076ebf.png
IP 188.114.97.1:0
File type PNG image data, 522 x 31, 8-bit/color RGB, non-interlaced\012- data
Hash 8e1041b5b2d8242c565725caf3adc033
96d3d32bc0b0f07acd69046e655ceeb05c5444ea
6d7ac293ab6a5f1f5bddc8d4e59602950fbfa5434d1b50e1a840eab9dd6b4b7c
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
GET /wp-content/SUPPORT/images/assets-images-site-homepage-sign-in-module-hp-url-example-CSX3e076ebf.png HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 12:54:12 GMT
Content-Type: image/png
Content-Length: 4102
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:24 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5398
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ilpEIj3EuBKLWc4JiCj1JsyPNcjQ%2B4VaY02V1nJJQM88wmXURidN%2Fasl%2BdVKC7t%2FAp1DXmvDWmmrlXUMUUO6Fu1HmLJDIN7OGAb3YYIvTkZo2m4HptRRm3gqOAvoJa4jMXI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79121d790841fac4-OSL
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/jdpower.png
188.114.97.1200 OK 20 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/jdpower.png
IP 188.114.97.1:0
File type PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced\012- data
Hash 9dc77c0ad5d86af8bc0ce8534df119f9
8f613dafde65e48b79f591abb9cd17f3674488b4
63b36fc2d96a85f37d1b05907fc5274ffc0a4c43224abd457d74ec847d6208e6
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
GET /wp-content/SUPPORT/images/jdpower.png HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 12:54:12 GMT
Content-Type: image/png
Content-Length: 19535
Connection: keep-alive
Last-Modified: Fri, 17 Jul 2020 07:25:56 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5398
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7ELojzRN2x2%2B%2B%2BSm8tb0R1TFMBHAnZAJ3uh4IHhwPzq75bVNdLSiyj21p%2FVqnmcpQkZzXSdR%2FM%2FVFBO92BW6xniFpVdLjvaDl60CW8M5atffp%2B1%2Fo%2BeT47ndspAvDbV%2BkZY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79121d79c8ccfac4-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
54.201.99.205101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.201.99.205:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mF2NDOLT/40XXcCF9TeLdA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YA1fuFdwPnjGXh4xdXmfkObSmDs=
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-hp-assets-highlights-consumer-other-en-hl_ntb-03_icon_arp7dcrm_e.svg
188.114.97.1200 OK 548 B URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-hp-assets-highlights-consumer-other-en-hl_ntb-03_icon_arp7dcrm_e.svg
IP 188.114.97.1:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (777)
Hash 17936c5d3d0f8035e6b452c5ffc353d3
96d686a6d8ed696f23676f7121c57ba9f7d7fd05
673a4e296673d1a91b593eebde7d3f29e12d00e713fd6962e44624162d46472c
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-site-hp-assets-highlights-consumer-other-en-hl_ntb-03_icon_arp7dcrm_e.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 12:54:12 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 17 Jul 2020 07:27:36 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5398
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b8FA2BuxcZ%2FLwlJOQOqqqgTkfRmpKqNVIFnmY1Wxuu8SxbMczClV7icDpx3uRPIdvcUPSYOZf70ZL%2FsCsnJrM68mAXR6NbxxFksbC%2FRVb3pk42KQxObt3HEgETM%2BGH3ZHm4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79121d7a893efac4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-hp-assets-highlights-consumer-merrill-en-merrill_rebrand_logo1.svg
188.114.97.1200 OK 3.7 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/assets-images-site-hp-assets-highlights-consumer-merrill-en-merrill_rebrand_logo1.svg
IP 188.114.97.1:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (7267)
Hash 0e12e6f3db32cde706413186a8f20b72
26282a5be57fbda570f18be90da1d5b85ad16fb0
2efeaef5d517c1c2c64c139ac81d48f6d8f9f381e1dcd8e9538ac869dc895fa9
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/assets-images-site-hp-assets-highlights-consumer-merrill-en-merrill_rebrand_logo1.svg HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 12:54:12 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 07:23:32 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5398
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fze3V1hLOW3Ws8UCjXcx1FgfdW57IF09diS0%2FvudpQr4DjOVopmJ19ktccHawQ9IDgSoYT1vKEvbacRtbbJlWH5AWKUQDr3jpN5%2Bz4R7zpWntCiK7qhIXifDee4Ac0PVxHQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79121d7a8ec50afa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
188.114.97.1200 OK 88 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
IP 188.114.97.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (63839)
Hash e62f1be665730e6e131edb86d11ff30a
510bcef89361f09badf129ebe04791b7e98ad72d
604f4220648e2faf1d84f27644ffff624a168dfc5ddd9e37f3ee41863d900afe
NIDS Severity Alert suricata medium ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017
GET /wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 12:54:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6uGXnUgmyWsCdGNc%2BC8rUWH8YWxYf6ZdMByidphqCK8hlKUMHSeWfTS8aBJA7MPidTo%2FxNp9%2BWsWOOVHXvlR1%2BGmbfWGOAG4I5875M3oSKByAlllt%2BlNGaXZ1AmSRQVaafc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79121d715d6fb521-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff2
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff2
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff2 HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sun, 29 Jan 2023 12:54:13 GMT
etag: "16fa-5c016c9cca9c0"
expires: Mon, 29 Jan 2024 12:54:13 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F71D)
set-cookie: TS01794157=01f400e112f72bbf03d97f96a18faa4bd7df1270b914c171de255a4a0539f8352fc6953985813cb3f1e7983abab7cece76d1ea421a; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9Zsdft5zIqzuPeY0R3_qgAAAPc
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-cr2_arllmbb5-e.webp
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-cr2_arllmbb5-e.webp
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-cr2_arllmbb5-e.webp HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Sun, 29 Jan 2023 12:54:13 GMT
etag: "16fa-5c016c9cca9c0"
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F70B)
set-cookie: TS01794157=01f400e112555d2bdee51218616870d5c2415504cd7ebbb8db0d15fcd9a4e08894cd263952e529dd20c0d723ac8bbdb3a1256f2fe2; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9ZsdbKLh1Zlh7zDxKvmPgAAAfI
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-tr2_arllmbb5-e.webp
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-tr2_arllmbb5-e.webp
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-tr2_arllmbb5-e.webp HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Sun, 29 Jan 2023 12:54:13 GMT
etag: "16fa-5c016c9cca9c0"
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F713)
set-cookie: TS01794157=0126c8e57fc7a7ed30c6aef0ff138dfdfa26b60a6fe3a3f53ea76deb9ef8823ed04bcf50dd594ff819c9856e3f026ce5aeac0ce5b5; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9ZsdQCNbY294LS10NKObAAAATs
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-nr2_arllmbb5-e.webp
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-nr2_arllmbb5-e.webp
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-nr2_arllmbb5-e.webp HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Sun, 29 Jan 2023 12:54:13 GMT
etag: "16fa-5c016c9cca9c0"
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F71D)
set-cookie: TS01794157=0126c8e57fe3dc7ec0e25c33befc87bbb8584ca6a731e630ee02bee9bb167950ecc055fc0de90c33a051b651715e1cc880888c930c; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9ZsdUnBgbpyrsy33sI22AAAAIA
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-pr2_arllmbb5-e.webp
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-pr2_arllmbb5-e.webp
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-pr2_arllmbb5-e.webp HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Sun, 29 Jan 2023 12:54:13 GMT
etag: "16fa-5c016c9cca9c0"
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F708)
set-cookie: TS01794157=0126c8e57f1b2a105e324a00c022b5b8774bcfd8e35d59fd8faede0dda4a63b6f4ac9bbc95857b676a36d0b2bc8fc77d5192855d7c; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9ZsdUnBgbpyrsy33sI22QAAAIM
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff2
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff2
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff2 HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sun, 29 Jan 2023 12:54:13 GMT
etag: "16fa-5c016c9cca9c0"
expires: Mon, 29 Jan 2024 12:54:13 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F6FC)
set-cookie: TS01794157=0121c3a381d7420ddec349c42b336b91384f19af675c3602ce4bc39107c52f98c0fb9210c6ec1c284ddeeca1e7a336882bab2d58cb; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9ZsdTQ_RUgjzgG1bhRZtwAAAJI
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff2
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff2
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff2 HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sun, 29 Jan 2023 12:54:13 GMT
etag: "16fa-5c016c9cca9c0"
expires: Mon, 29 Jan 2024 12:54:13 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F713)
set-cookie: TS01794157=0126c8e57f32efe24fcf798c1d51873053f5e483efb203193ad46e081ea0cf3cf526fe6d05312666c670382d8cdffe4e333b92324a; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9ZsdbnxlV9PFQEVaX4ExAAAAeI
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2910
Expires: Sun, 29 Jan 2023 13:42:43 GMT
Date: Sun, 29 Jan 2023 12:54:13 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2910
Expires: Sun, 29 Jan 2023 13:42:43 GMT
Date: Sun, 29 Jan 2023 12:54:13 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2910
Expires: Sun, 29 Jan 2023 13:42:43 GMT
Date: Sun, 29 Jan 2023 12:54:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
34.120.237.76200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4jPbm4WufkUKm7ljLvpHrJUFhr-JQ_nl3iYfI5S8nTqEszFdUtz9EQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 05:24:09 GMT
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
age: 27004
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5dcfee7f-f43c-4828-8113-8ba8eb26f727.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5dcfee7f-f43c-4828-8113-8ba8eb26f727.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d5ed99a9aed6f367efc5c9498ce87ff1
3123eb6f550c51fe17fc62eff943b3739e239a9b
536f45bf2eb41f7056df8b34964538005d6a0a4c6157def3fbdd9487f8c79027
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5dcfee7f-f43c-4828-8113-8ba8eb26f727.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10168
x-amzn-requestid: fe58fe3c-dd23-4614-b5a2-e91ef68c2ab7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fFOD7H-NIAMFcxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cb907f-687fc51741d7ff97182d1955;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 07:13:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GEghrk0LlbdfqVAHey-W84Zk9XHT2PD268Vfxf85HEvil0Ra27YgPA==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 03:43:37 GMT
age: 33036
etag: "3123eb6f550c51fe17fc62eff943b3739e239a9b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: e6e0789c-a4a9-4ffa-a0ae-691770d1035b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPF9YEBmIAMF0kQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf8388-01d2093432d3959903671a69;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:06:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: awfNeaKbFw2bjiTGwUrwUTxU-qbVS2eTjn948H8kn1hy7pi_DwLMlQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 17:35:56 GMT
age: 69497
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
34.120.237.76200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4c77437e3a7361861aed8bfecbfe6bd6
fefd238c13c0fdfb7d964c90fcc8a8cbbf953034
282d15c443cb6232ae0a30046a0dc24360617355a4651cdba59b11e6f7313d8a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5594
x-amzn-requestid: d56c9b84-dc1f-4d5c-91bf-7db55058bf67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLyeEGOloAMFpzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ce3126-5013a6b971d6800c5c85a4eb;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 07:03:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: D2ZAelkDgsd0wjoOSoPRwTzhozs84_aIcgwU-QmbDrTnHztVD0VL_A==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 14:57:16 GMT
age: 79017
etag: "fefd238c13c0fdfb7d964c90fcc8a8cbbf953034"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd9499d0-2a81-41ee-b328-0d82ea64b349.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd9499d0-2a81-41ee-b328-0d82ea64b349.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57ff6665d99a17d06b75c8fe64c90ab3
05648eed6830a794aa7e30ba4da526ed4c45b0ca
728b809756a0faff1a55bb03f13f33e31518f321e50dd944a0267d585c09264c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd9499d0-2a81-41ee-b328-0d82ea64b349.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5198
x-amzn-requestid: 8117f45b-926a-4cbe-b152-dae983bc3526
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fOYdlG6XIAMF_vA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf3abd-7ce531f65f66ac3a73970841;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 01:56:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9qRYwsM8g7XZPY2E-9puCMAp7VKUvdIiK8jA0wr0XSpnMScoQYCwGw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 21:46:47 GMT
age: 54446
etag: "05648eed6830a794aa7e30ba4da526ed4c45b0ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d2bbd93-ce5c-4300-9ac3-8ccdde169701.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d2bbd93-ce5c-4300-9ac3-8ccdde169701.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ed721e83648418f4a5d64f9d038fd1a
7a311c79e311448941a8d624c1064b1a2d97cfbd
b961e73aaba814eec66532ceeafad5191371fc762b05338990e8cc9c8ecfcbff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d2bbd93-ce5c-4300-9ac3-8ccdde169701.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6875
x-amzn-requestid: 5fb13e91-8750-4dd9-90a2-f1218ea6009b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fS9t2E0AoAMF_LA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d10ff2-22e819312302377c4bf698ff;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 11:18:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QH_-DX5fiBhfS9MVH6pJi57mqFRRPSPf0iDbp_5BHE1jUqCZvvPesQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 21:46:21 GMT
age: 54472
etag: "7a311c79e311448941a8d624c1064b1a2d97cfbd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ccrsolar.com.br/wp-content/SUPPORT/images/favicon1.ico
188.114.97.1200 OK 2.3 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/favicon1.ico
IP 188.114.97.1:0
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 21b7c547097e81b11e9cb7ba132e187a
5ff4b380cdd2ccd8ca07cdb5205489d91ed5d319
24aa9c686a51cadba99967d1a3826fdaa2c351b593dbc445b8e3c9a7a9241c53
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /wp-content/SUPPORT/images/favicon1.ico HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 12:54:13 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:54:10 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5398
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kGQyPDSpUMFWFRKYYnMx6qjqQPlBcFtTmJ4ADZAJv2iOCxdeBgFL3%2Bg%2F0DBVzxc7SLc%2BL3TQsrE37M44u6sqZzJbfyVlsbFYSDdBLa2Bkwco8Un2678bUxAvU8kfUn8APl4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79121d810de20afa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ccrsolar.com.br/wp-content/SUPPORT/images/192x192-CSXafb7d716.png
188.114.97.1200 OK 8.4 kB URL HTTP/1.1 ccrsolar.com.br/wp-content/SUPPORT/images/192x192-CSXafb7d716.png
IP 188.114.97.1:0
File type PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced\012- data
Hash 67af3bbd46f9947739538d49395d573d
03a34b0aa432274f88862b27ab109f8e26311e72
b47bfe9d7333188f5b2f8690785ccd966d882c2364a5e4e5ae293e02554ad8d8
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
GET /wp-content/SUPPORT/images/192x192-CSXafb7d716.png HTTP/1.1
Host: ccrsolar.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ccrsolar.com.br/wp-content/SUPPORT/loginweb.php?sslmode=true&access_token=gzNPcXxgboRYsnmnZYYu6ES5qyeC5eLlNybZvIgH67Gzu2Xu1WZ8ARd0qsDvGoRtW2tsKJaRRRqmUoQV
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 12:54:13 GMT
Content-Type: image/png
Content-Length: 8354
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:52:54 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 5398
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UhRFHVRsPggJVucQ4RLAIMnFTgNmYXLb8vSdwxh50aIeJzAXm7kn%2F7ZNqCmzpT1s5Xlqtf1%2B0YPhXLJrgpXHJO5nIGOaAJU979Uf1H6ewkt2SiOVml0fMf0qvlsumTx4tRo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79121d810db1fac4-OSL
alt-svc: h2=":443"; ma=60
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sun, 29 Jan 2023 12:54:14 GMT
etag: "16fa-5c016c9cca9c0"
expires: Mon, 29 Jan 2024 12:54:14 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F71A)
set-cookie: TS01794157=012ef7d642ba09a7c1da7615eb97c3657e9c95d19c029839597b76afdac149dd55a8c1dd253b78e03350096915b0a2e2f8eb910fb0; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9Zsdur03ngOkZbQ47gjtAAAAHM
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sun, 29 Jan 2023 12:54:14 GMT
etag: "16fa-5c016c9cca9c0"
expires: Mon, 29 Jan 2024 12:54:14 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F71D)
set-cookie: TS01794157=012fb9decc2d4cc0a727833db64f5bef8620f3a067ad444407196c8c5464b62787146ab623d3add6c54996b4d711bcf0b3102ade17; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9Zsdur03ngOkZbQ47gjtQAAACg
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sun, 29 Jan 2023 12:54:14 GMT
etag: "16fa-5c016c9cca9c0"
expires: Mon, 29 Jan 2024 12:54:14 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F711)
set-cookie: TS01794157=01c97de39cd0d876d22abe99effef36dc69aa410187cff0b540b106beb5e196f0993ff6fe7212cc623ca7faa8c3a6c12ddcd5506ef; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9ZsdlMFN8B7rDmnGu-FJwAAABM
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.ttf
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.ttf
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.ttf HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sun, 29 Jan 2023 12:54:15 GMT
etag: "16fa-5c016c9cca9c0"
expires: Mon, 29 Jan 2024 12:54:15 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F709)
set-cookie: TS01794157=0126c8e57fe1e3ffdf2bdf92786087aa465acf16919226a302ad2f2f82d053997cd7d74180af739c41a0eafde68e7fbdbb8bda1e04; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9Zsdw-Uiy9KvvJI3NpKNgAAAH8
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.ttf
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.ttf
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.ttf HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sun, 29 Jan 2023 12:54:15 GMT
etag: "16fa-5c016c9cca9c0"
expires: Mon, 29 Jan 2024 12:54:15 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F718)
set-cookie: TS01794157=0121c3a381b585df0ab5b2d8a178eba435cf3a213e05e67934d0de23bbd067c771d73d4f9034266272201f883aeeca75a03ca52e4b; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9Zsd7nxlV9PFQEVaX4E5AAAAY8
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.ttf
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.ttf
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.ttf HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ccrsolar.com.br
Connection: keep-alive
Referer: http://ccrsolar.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sun, 29 Jan 2023 12:54:15 GMT
etag: "16fa-5c016c9cca9c0"
expires: Mon, 29 Jan 2024 12:54:15 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F713)
set-cookie: TS01794157=0126c8e57f80373c19797488cf678d86591fdc3d2e9e88f7688653a1f4c82b37e2e646f5ff771ef5851a9ef836f848c99f3efa2f29; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y9Zsdxw4rfgcOs64ZXwk8wAAAeY
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2