cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css
200 OK 5.8 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash e9365fe85b7e4db79a87015e52c3db6c
2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9
dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56
GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: text/css; charset=utf-8
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 649525
expires: Wed, 20 Nov 2024 18:41:16 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7QqfJKTykrkeLBCTV%2FbqlJ7IJzVfmcX3X3duvMm8UXrXo9R0kNVCqqOxBdhXBT8%2FmqoLf4UEQUiXGgbM9Mp9%2Bxq6QdRj95yWZuwPJYY1UvZLSdyCxzIFLwabcydHjjxrf889OSEC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82ed769dbe78b51d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
200 OK 5.6 kB URL User Request GET HTTP/2 dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
IP
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1098), with CRLF line terminators
Hash f9ab91912e95e946b5d4aa51b6c18fc0
eac9b37b238360dad0dba95300e17149b5fb29de
08e78fa84df1b485347ee6659cbd8202bfdc7dca9f4f656fd9da91a5c32cbe24
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/jj1saghf.php HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=34ciWUScwXl9Uk7sUy63963pbZeHdLGrOlM8legmVXfrx0oZxlSwiemdMEsIs6Ue4rCJZQXaIvdq%2Bb7mZ0PYSLDTEkWH3XpY4EDb6O1uaCSrV%2FL%2FKoihtylXsof02GmSP1O475X5MWs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ed769b0ee2569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
dulliusimoveis.com.br/links/pubg-skin-V6/img/style-img/twitter-text.png
200 OK 4.3 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/style-img/twitter-text.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced\012- data
Hash fef946b8bba756359e2a1e87ccd915ea
acc364946077b0e32b2343474ce4066ad3ee524c
1be5d05ce6faad469f7f9c5a5879f2d9f8d267b60eb394e92c19217268bcea8f
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/style-img/twitter-text.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 4298
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-10ca"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0XwP02vCUaRSD4FNXlcvlRD7XAFSpwep4iQpXVYzTAwQGC6BwS0m3HRVNctySEsPCNXdMhJAZs5a3YDs38W0L55IZ%2FMBGnzsR6f%2BCZUSGlG39tY2DynFgvOq8zHUoNH5JLt4UB98hLg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769dfba456c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/logo.png
200 OK 50 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/logo.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 1074 x 800, 4-bit colormap, non-interlaced\012- data
Hash d2eba90e2876318a2a6e88ca9c3dcc5d
7efa230be0d0ff0d26cee718d8aa579e7595c14e
a2245e7e96fdfde4e68615f3b224d83473ab45d215681c5a265c53915dfc627b
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/logo.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 49773
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-c26d"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0l3rJ5aMApBIvPQ671CnFCzoVxVmYtwmgx6ivV09Ibu32d9BMl5%2BB4ZF5Nv46ySDZ2jwVT0kr8g60WhMygkKGR2VVSQgnKAFDw%2FhKlGrJUukiDRQClxWewqs0AIdUXEgEiWGXAc7ACI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769d9b2856c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/style-img/icon_fb.png
200 OK 4.5 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/style-img/icon_fb.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced\012- data
Hash 55eef055b7e3c9a7b01e75bf1d946602
298bedf186fdcc606901513a2edbb5bc3ca233e6
9af17159dff494810a71a37678db1df805f264b935730d1c2e5a4d970305917f
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/style-img/icon_fb.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 4549
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-11c5"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZcFpxurBBkIBcvFP3ko4uvO6wfuFrX4axvJbkpQP66u8lEjpzd0omQzUYjvzH5Nj7Geb93XpyN%2BoFtuoL6L0fKCmE3gnKpNTfBXzUEQqisqYWuU1%2FThe5omDGMAbYbP9K11o5w6XKIk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769e0bca56c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/1.png
200 OK 79 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/1.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 618 x 618, 8-bit colormap, non-interlaced\012- data
Hash c4f6e5a9992ee59c5e5a2594a33ae021
3f4970fa9695a44419cfcbf99cbe24e5a7c9cdcd
0278cb3cc03b89f46507b51a28a714fe37be3a91e9b22b77169e97df0ef775ee
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/reward/1.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 78754
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-133a2"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pwfs%2B15%2Fc7egUJaLjvaU4ozojLjZIu%2BcD9GQoMQpzrfihRDfINbP1L0MpeB5vw3V5Dt871v2YBnrMac673iUoBe%2BLEqexVrDrXAq%2BVpcV3Q1XmGLHSCVh%2F%2BmtLCS3%2FeYiL%2F8dvBuu6I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769dbb6156c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/style-img/footer.png
200 OK 23 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/style-img/footer.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 1280 x 189, 8-bit colormap, non-interlaced\012- data
Hash c6b56cf1fbbb63620e8558afde759e96
4d50888d8a17c2dcdbd05e6068ca4b4b587c7f29
34f7601064bb7cc3cce9ba942dd92d7f53889c703daea37bf34e1e71a1de03f8
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/style-img/footer.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 22718
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-58be"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5AaDlhJLNWzAn%2B3NE9aE%2FXwQD83NCE1QRDWHqJjwKTs7zPwnL03g3MaIlrA72QNoQ4i2FHkFZkj600vEAZzUkzXe0VM2%2BZLNhquzuTyipkyXKXeD4gHPI49f1L891FFrLf7gHecZkwg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769dfba156c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/header/1.jpg
200 OK 134 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/header/1.jpg
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=608, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1080], progressive, precision 8, 1080x608, components 3\012- data
Size 134 kB (134430 bytes)
Hash 185fbb0f2487b214d5098a25e860c5ed
0b24edbcb1ceb6718328b124b0a8308bcf625381
811bd2a6c56f0f4fd29a058b963e8d881e26b5c9327c33ec07dd647ac658d35d
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/header/1.jpg HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/jpeg
content-length: 134430
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-20d1e"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tRjEe4I4GdJ2C1ZAYzeOS7l88369wgix5pV4R3RFWCE5%2FHTZONwyXKMEbcuSngxqv86dX1yDNaguOs91uPx4M66gXbWinXnWDnkWNrMi8VbW%2BDTCahiq85FxYAqZQAD6bZtZdgaJrqw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769dab4356c6-OSL
alt-svc: h3=":443"; ma=86400
i.postimg.cc/jnLQLD1x/footer-socmed-1.png
200 OK 7.0 kB URL GET HTTP/2 i.postimg.cc/jnLQLD1x/footer-socmed-1.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash cc467f5a6a7ec0c41a34f4400bfa8473
025aa3fbceba7087d07e152b822820a77fca7d37
72271585bdd425610dd93695a3150c3820ab3a26fb389cafe8ccc67ed8b8690e
GET /jnLQLD1x/footer-socmed-1.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 6953
last-modified: Tue, 22 Mar 2022 04:48:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
dulliusimoveis.com.br/links/pubg-skin-V6/img/header/2.jpg
200 OK 131 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/header/2.jpg
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=608, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1080], progressive, precision 8, 1080x608, components 3\012- data
Size 131 kB (131021 bytes)
Hash d25de5484328f1c9cc729e4c9efaab00
6b6bb07b1dc0bdd3b368acc42ad7dd1524f88413
44d2740d330cc9502daebc85ebcfa794418e6a66e497963ae96e7c333a6ddf0e
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/header/2.jpg HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/jpeg
content-length: 131021
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-1ffcd"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qRVP3gsnlatxwoQ849DaoL5EuHd8%2FzVGUcJ%2BX%2FBMiAfUbFwvK60J%2BB9mzdRXQ4bkfTfYQ4A%2FqQSZ5vnsaPLdwX6FnM5UYTMdYb%2FPt2A7pqPlz3qwN%2FM0cY2wTV%2FDUxMBb3csTijKUUo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769dab4556c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/header/3.jpg
200 OK 116 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/header/3.jpg
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=608, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1080], progressive, precision 8, 1080x608, components 3\012- data
Size 116 kB (116175 bytes)
Hash d194dd87b66cb4e28857438ea5281a1c
f4acf1660c3c2ead39fe99d75cf78e9455c9167d
9e9808354f10e70161d10e58a1e0886fd0cb2ce90eac0a807d724671c11c01ed
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/header/3.jpg HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/jpeg
content-length: 116175
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-1c5cf"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DAROVIgnaB6txGkqq7DMl7S%2B7ydJ4d2AFODE4uwD7IxkyWPj1JDMRvwmOuw3BRsSQpcn2oXCjtoDsM5poDan53ygqQ07h1XB3gGTKqXWgMVmG%2B6qp3gCDmVE%2BOerDZb2EbWOJmW8i9g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769dbb5f56c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/3.png
200 OK 70 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/3.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 618 x 618, 8-bit colormap, non-interlaced\012- data
Hash 4bd7d94a53accf7ca468ed090c3dbf60
cd277c8b15a57c08d7bb95107b03cdcc91f544a4
cc11b5cf955c4ddf97c724cde4ea907598a02ac48a48058a96d655c358ecf056
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/reward/3.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 70012
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-1117c"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nPkdoJ9meKuGAq%2BYElb9uhO0ajavnIUXq8mEIGWW%2FaKYLoTiL1JnvRs0WhNpeYHIX852yt18veZqP2dkvLm3X3xR39MQmESmaig4MRlEhDLebHo18PMnItIjBZkjyomuqPtOLZ%2FtlL4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769dbb6456c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/4.png
200 OK 165 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/4.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 618 x 618, 8-bit/color RGBA, non-interlaced\012- data
Size 165 kB (165271 bytes)
Hash b031760db8a8ab0828e5e9d38ef88842
19f26bdddb7909b94b4ba7fa2c7394fe70832a82
4d6b7dbcc31d4a35e288a0bcec25e9a0a72b23d0561fd6783161276de44deedd
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/reward/4.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 165271
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-28597"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SZ8rZV%2FKJAn9s0Rvcs8FUtn2vP7jzFPI8LGxcOq7nwNctPKwo2BKFdbFiugcIcESY6YpXBKjh4J%2Fg6dUGMd7O4epdtKTnNB2Nhz%2FyPURiku6ye4xXAvq5a2s020jbSASXZsewFvtPfA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769dbb6556c6-OSL
alt-svc: h3=":443"; ma=86400
i.postimg.cc/Thwcks3z/footer-socmed-2.png
200 OK 12 kB URL GET HTTP/2 i.postimg.cc/Thwcks3z/footer-socmed-2.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type PNG image data, 180 x 148, 8-bit/color RGBA, non-interlaced\012- data
Hash 0d76c6316716e7672112fa057d0da131
4a9f7f2d17431734575380c07d92564957f02c46
62dec982412037eb2b025b01c2438385b53354c2a6089ef9102529ddcb37d630
GET /Thwcks3z/footer-socmed-2.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 11789
last-modified: Tue, 22 Mar 2022 04:48:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/2.png
200 OK 89 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/2.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 618 x 618, 8-bit colormap, non-interlaced\012- data
Hash 32352e425a480effa2a4919b3123d966
66807079dc86b060db5038bd171c7a366a2a82fa
8b205ddb03b04bc4c76deee9242dbbba1bd2c14ff17a9a7cb921ab33331e744c
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/reward/2.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 89413
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-15d45"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BnNpY%2FjNCu%2BbkQFKpUdBZkPXe8sGKBNmWT3l1v4SNc59LKABy5eQnZpa8JW3SELJUicYlBBJp14Bf3ajiV6CE0EKLw2uRkmgIu%2F31fyELWt4EU80fTME%2Fw3F2LDQn4%2FmC%2Bd1yp38IOE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769dbb6256c6-OSL
alt-svc: h3=":443"; ma=86400
i.postimg.cc/bdB94RGs/footer-socmed-3.png
200 OK 8.0 kB URL GET HTTP/2 i.postimg.cc/bdB94RGs/footer-socmed-3.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type PNG image data, 180 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash e9c30eff69db680e38d3e93aea870280
7958cc94ac08dde6f5ff38d4d220c376a66a697a
96e9a2cfe21342fb25fc23d598a500f1102b94f79478a8834df013bf95bc7007
GET /bdB94RGs/footer-socmed-3.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 8004
last-modified: Tue, 22 Mar 2022 04:48:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/5.png
200 OK 172 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/5.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 618 x 618, 8-bit/color RGBA, non-interlaced\012- data
Size 172 kB (171690 bytes)
Hash 9debf03235d05071de42feca1a9a1158
c23a590ce5dc85e7d61e1adcf18d534374e09f3d
8fe13b21a29cfd85e597ca03a7eea7903809f8f8255e508e2ce38f06a6839267
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/reward/5.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 171690
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-29eaa"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ixeJplzH0lVNet%2BoZ9IeHjVEbMDnWEThO%2BgPkF9TjkzoS1XN5uMb4U2rGDhO%2FYxGtzyKalLyynSumByW3nqSrLZTqJ9sHst%2FxVGGGI20uQY1axgkXC3FPM3G6%2BYRbFanktN%2FItXPQQk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769dcb6c56c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/6.png
200 OK 153 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/6.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 618 x 618, 8-bit/color RGBA, non-interlaced\012- data
Size 153 kB (152792 bytes)
Hash ba58bb73973cdb470f316dc049c4a259
454f5c489a7c28c45918e739053c2b1e5b4428cf
0b2c8d9119a109b2de98b03355283ac8cf4fc5533bc95fea1fcaa0cfbcfcff1a
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/reward/6.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 152792
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-254d8"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=57Z%2F8Sc7%2BXZT6ThC2HvJR4AoLXF4%2Bq4kFq3JJh2sLANFgBzTt1IaDRJOTjt0jrTkN%2BsIqYZ26zQ4aKF2O2NeoNeXAuo4zO8q6tsolShfTabLvb2CwSfhdC78hFc5aHEpx1GkJf0euDY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769dcb6d56c6-OSL
alt-svc: h3=":443"; ma=86400
i.postimg.cc/YvcfCqz7/footer-socmed-4.png
200 OK 15 kB URL GET HTTP/2 i.postimg.cc/YvcfCqz7/footer-socmed-4.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 396ddda13117ca63c10d66afc75b045f
a3e197f3f99566f72693c8ccbe722a2430dfe1dc
db2e36d4d529976cb7f6f07619bdb7c8918e9f35a705b7db99074c427b4f705e
GET /YvcfCqz7/footer-socmed-4.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 14747
last-modified: Tue, 22 Mar 2022 04:48:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.postimg.cc/w7RQzsJF/footer-socmed-5.png
200 OK 9.8 kB URL GET HTTP/2 i.postimg.cc/w7RQzsJF/footer-socmed-5.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 010d177128984148483764afcbe38b8a
a46bdb7a79807f57863ac5bdf51b769d1e8e97f0
22413a2dd1f4a4d55c29a714d5e81341264eda2dde1113562c48682de1770d91
GET /w7RQzsJF/footer-socmed-5.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 9840
last-modified: Tue, 22 Mar 2022 04:48:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/7.png
200 OK 204 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/7.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 618 x 618, 8-bit/color RGBA, non-interlaced\012- data
Size 204 kB (204102 bytes)
Hash 6029a41434d431875dfabbce5e46fabe
dc6c7a5515d3e592a373802bb093f9fea55c4073
16d5c358b753498f7657b59945d736bf2472326f59e43406e83066bafe3aae33
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/reward/7.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 204102
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-31d46"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r1EfbqqI%2FgA%2FGFyio%2F72f5meTa6XyRVTZ2FmnK8iakUOxrDGVogZpMXNrSogo7H7dieHJyjNkBLZ4wR6U8KtZpqKQIX5le6JJEL5yPSL1aO7ikR6inu3zYr4CmregDlVc23GOd99goE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769dcb7756c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/8.png
200 OK 204 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/8.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 618 x 618, 8-bit/color RGBA, non-interlaced\012- data
Size 204 kB (204045 bytes)
Hash c44e337405fb6f833a73c12c1a811f62
23eb5af47afda43e5fbf1f6fc8ef6634abc4e0c9
af2c35b6615eb365dd59a40b19dafaac46beaff5f386cf227cb8ca6dfa10f25c
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/reward/8.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 204045
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-31d0d"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HJMfLocdB1aagukQ1B%2FXe0XbAxw6obpjd2X%2FFyXnDvhVko3gWkkhn5AORG5Ti1HypsSrJMLpwOZG32hmthmrGEr4JKBSjGUqw9Dp9TIm6TitwdHW96sbuxllTMDNHWlRRNGk8dtZWBs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769dcb7b56c6-OSL
alt-svc: h3=":443"; ma=86400
i.postimg.cc/Sxyy8Kzz/footer-socmed-6.png
200 OK 4.3 kB URL GET HTTP/2 i.postimg.cc/Sxyy8Kzz/footer-socmed-6.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type PNG image data, 184 x 140, 8-bit/color RGBA, non-interlaced\012- data
Hash 27eb10858d473bfd39cca3251fe35a26
f472c341ec3696a0c7bb85799495995ff72f941f
e0e93e88b46229223de82294608854d6578f0ade6f696b31f830cda37aae9b0e
GET /Sxyy8Kzz/footer-socmed-6.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 4316
last-modified: Wed, 13 Apr 2022 13:57:35 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/9.png
200 OK 204 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/reward/9.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 618 x 618, 8-bit/color RGBA, non-interlaced\012- data
Size 204 kB (204016 bytes)
Hash 8a32b123fe330a37c17e5a19dfedee4f
00e3b6db97e54897b177cf3150773e78427d5919
57dd43d6286b6ff7ce6631a209ccf8593b9739691f60548ca9ea9146469a6b5d
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/reward/9.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 204016
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-31cf0"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oYn%2FC%2FT1nMv6CyarMODyEuFlfKQFL%2BCn7TJ2nIgr%2B%2FkHT%2BOqA1MkHdesbNor8Vysq3Fs8iU%2BmDozfMHBa5w%2Fa6h%2FOtBAneO0zqkGgzr7Aw4iUDmkf%2BvOrNSfCuPJFHUGQRAR3VS36i0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769dcb7d56c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/priv_laz.png
200 OK 16 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/priv_laz.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 1280 x 54, 8-bit colormap, non-interlaced\012- data
Hash 557dfbdc68ce9e69b419fb6b0ba9c8ef
e39536f96647ef45e7f09cbbb230307ec2a46cc6
af3402159a3d2f80ac6b81cd8e6705e832c25ae031eb99410067a853b505a95f
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/priv_laz.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 15910
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-3e26"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VDdvToNt6uwYBT8I2LOh02A3rWr1AJbHXbX3%2BDXbzrkgoytzIPI39xPD3tMWPeoOyOMIIW5bXfpgvBL1kDoyP%2BKP0Iaf%2FJP9pI%2BoBUNG%2BONLp1ANg78Ma0nMVwEp7sWTU8Gach0NN%2Bk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769dfba356c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/style-img/facebook-text.png
200 OK 29 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/style-img/facebook-text.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 604 x 158, 8-bit/color RGBA, non-interlaced\012- data
Hash 74190b93fc4f5d88f0c8e6411ba20bd8
89ce2ecb660a90b8e6ed1b335443d7767c59f28a
092a3cd5f86b3f039feefdeb86694cd16ae545af214cfda614bdbbe2d1bde401
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/style-img/facebook-text.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/png
content-length: 28789
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-7075"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TpYTaawcWuMpN1p7jiWvyhpGp%2FSc%2BkhnmmW9dbU2LrLMqh%2BxszNyDKDJEK9cgX1ExBj6ViJU1%2FHhagN%2BvFGh9dPkS8M2LfJlc%2B74tQ3OwziP5Yv7ciZUsah5ceLfP6hJzABCMrlpS98%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769e0bc156c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/style-img/icon_2.jpg
200 OK 41 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/style-img/icon_2.jpg
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 554x554, components 3\012- data
Hash f0b018f259fb74e0c2f78a3d4c98415c
9649ffd5ed2a9a824d55742817f9a43a25b6cbfc
36859bb2b92fde6387245ea088792aa146699f8a46f3f798dd379ae5b0c9418a
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/style-img/icon_2.jpg HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: image/jpeg
content-length: 40886
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-9fb6"
expires: Sun, 31 Dec 2023 18:41:16 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kGmOFh18EtY%2Ba7mXUMTuvZsgLcVa95EpFnePjw24f9LlzQyiirHqc4Ugr6dhAS5XE351w4695ko%2FGes8Hlm5D889zTl6QkNdSLDPBuQ5j0Kio%2B76gvFHAoQDdKvmfA9TZXkFqxloFOA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769e0bc456c6-OSL
alt-svc: h3=":443"; ma=86400
www.pubgmobile.com/act/a20180515iggamepc/logo.png
200 OK 6.1 kB URL GET HTTP/2 www.pubgmobile.com/act/a20180515iggamepc/logo.png
IP
ASN #20940 Akamai International B.V.
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerDigiCert Inc
Subjectwetv.acc.qq.com
Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F
ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File type ISO Media, AVIF Image\012- data
Hash a74329a2054a9e096a43ba8742dd9523
4ccac3041bf854721b91dcb45286b8488dd9f072
cde9945e91f0e51058869d687cd24c8f58804f25623999f1291c71b3697093b6
GET /act/a20180515iggamepc/logo.png HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "5ff6baa2-3bf2"
last-modified: Mon, 08 May 2023 08:25:46 GMT
server: Akamai Image Manager
x-serial: 910
x-check-cacheable: YES
content-length: 6055
content-type: image/avif
cache-control: private, no-transform, max-age=43200
expires: Sat, 02 Dec 2023 06:41:16 GMT
date: Fri, 01 Dec 2023 18:41:16 GMT
X-Firefox-Spdy: h2
www.pubgmobile.com/en/images/nav_shop.svg
200 OK 526 B URL GET HTTP/2 www.pubgmobile.com/en/images/nav_shop.svg
IP
ASN #20940 Akamai International B.V.
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerDigiCert Inc
Subjectwetv.acc.qq.com
Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F
ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (985), with no line terminators
Hash 061f8e3121c0e545cb6277cbdba661e0
680a6ef2b0b5b9ae376ad927055e93e1efca2389
bad9e2db663bbdb4f80bdcb6ea144d69502f9d58bf6fcf19f17e365ffea0220f
GET /en/images/nav_shop.svg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Mar 2022 13:24:18 GMT
etag: "62387c82-3e1"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 526
date: Fri, 01 Dec 2023 18:41:17 GMT
X-Firefox-Spdy: h2
www.pubgmobile.com/en/images/nav_menu.svg
200 OK 426 B URL GET HTTP/2 www.pubgmobile.com/en/images/nav_menu.svg
IP
ASN #20940 Akamai International B.V.
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerDigiCert Inc
Subjectwetv.acc.qq.com
Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F
ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (876), with no line terminators
Hash a1f09c4f5c87271dbccf8cb05885ad42
18bbacc9c372dcb6bc77c2475595e058c1ad1594
b0d849e0e910d13bcdab1e94f5c799dda1a9429c908e18069f9dc7f7d551d58a
GET /en/images/nav_menu.svg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Mar 2022 13:24:18 GMT
etag: "62387c82-374"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 426
date: Fri, 01 Dec 2023 18:41:17 GMT
X-Firefox-Spdy: h2
www.pubgmobile.com/en/images/nav_download.svg
200 OK 485 B URL GET HTTP/2 www.pubgmobile.com/en/images/nav_download.svg
IP
ASN #20940 Akamai International B.V.
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerDigiCert Inc
Subjectwetv.acc.qq.com
Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F
ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (999), with no line terminators
Hash 41c1c00e6070b60d70177ae11625bb86
7f01626c76ce129247860802fd2355f2878fe8dd
0b22f25d8b7421c4c4aec15a9a4781f873545a5732ac128871da40f38c98f4cf
GET /en/images/nav_download.svg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Mar 2022 13:24:17 GMT
etag: "62387c81-3ef"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 485
date: Fri, 01 Dec 2023 18:41:17 GMT
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.7.0/jquery.min.js
200 OK 30 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.7.0/jquery.min.js
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (65447)
Hash e6c2415c0ace414e5153670314ce99a9
5a9eeac34d86e92e5660e0f4f87204f1ed0c8ff6
d8f9afbf492e4c139e9d2bcb9ba6ef7c14921eb509fb703bc7a3f911b774eff8
GET /ajax/libs/jquery/3.7.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30433
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:06:44 GMT
expires: Thu, 28 Nov 2024 14:06:44 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 189273
last-modified: Wed, 17 May 2023 18:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pubgmobile.com/en/images/footer_link_bg.png
200 OK 1.6 kB URL GET HTTP/2 www.pubgmobile.com/en/images/footer_link_bg.png
IP
ASN #20940 Akamai International B.V.
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerDigiCert Inc
Subjectwetv.acc.qq.com
Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F
ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File type PNG image data, 560 x 127, 8-bit/color RGBA, non-interlaced\012- data
Hash 92ae645b6114492e8c1c5464d949466a
1d27f2644c0f5e899e9478c78136a9bc94131150
f1bd509f6032d31635a91d57de9428b83929221b854768c38c8f1643877a9417
GET /en/images/footer_link_bg.png HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/png
content-length: 1630
last-modified: Mon, 21 Mar 2022 13:24:17 GMT
etag: "62387c81-65e"
accept-ranges: bytes
cache-control: max-age=72
expires: Fri, 01 Dec 2023 18:42:29 GMT
date: Fri, 01 Dec 2023 18:41:17 GMT
X-Firefox-Spdy: h2
i.postimg.cc/02KwtTc7/footer-bg.jpg
200 OK 12 kB URL GET HTTP/2 i.postimg.cc/02KwtTc7/footer-bg.jpg
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type JPEG image data, progressive, precision 8, 579x800, components 3\012- data
Hash 27b8ceba13cb26a4ac6951cecdd4a5d3
accbec4f1b6038f0bcd2032da80c2ee342033d2e
d1740f2a847c3b67a1071442fe2af27298bca56ab267e90ea8aec3d4e9b9552f
GET /02KwtTc7/footer-bg.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 18:41:17 GMT
content-type: image/jpeg
content-length: 11651
last-modified: Wed, 23 Mar 2022 19:15:53 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
dulliusimoveis.com.br/links/pubg-skin-V6/img/bg.png
200 OK 4.6 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/bg.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x885, components 3\012- data
Hash b38e2517460997c277a6950395c6bac0
4a96411710624aee6c06c5024fa3ed486b5d99d3
eee9ddcfdef0f4dcfe61dff2400e3782258e4a0323f22674cd6b0a03a9348947
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/bg.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/css/lazaruz.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:17 GMT
content-type: image/png
content-length: 4633
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-1219"
expires: Sun, 31 Dec 2023 18:41:17 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SAxDzFaOyLNRElDG%2F1HnOWNT7aozI0MvoVhPV%2F90rfnUvjHB6Eb2ikGzalq%2BEf6%2FRfyBYoRBdAI3Au4iwrz%2FybTUmYxH6m%2FEUeLTT62WAdg1fHZ0ox1se5p%2BCr55R0WpvGs39%2Fco8RI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed76a4fe0356c6-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0
200 OK 38 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 38384, version 1.0\012- data
Hash a4d31128b633bc0b1cc1f18a34fb3851
6ee4c79372c3fd679706306ede47e4b03cf53d60
e8eea96e29a7c0a72612ab85ca3229979666467a28349642c2176e7189a1a39c
GET /ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dulliusimoveis.com.br
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:17 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 38384
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03ed9-95f0"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 822159
expires: Wed, 20 Nov 2024 18:41:17 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=prxWqbqKMqw%2FuJKIcr1xiyn0SpSMB0TW5tMzIPxcAkgFwkKbnXGQSASL2sXVBwq%2B481i6y9B4t6gAWmjryDfcri95cKGP62EyIJCKo%2Fvz%2Fxrd3KSZx8JjYfCzCz5UA6TzNsKTqlZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82ed76a528e7b4f3-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/container.jpg
200 OK 4.6 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/container.jpg
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x885, components 3\012- data
Hash b38e2517460997c277a6950395c6bac0
4a96411710624aee6c06c5024fa3ed486b5d99d3
eee9ddcfdef0f4dcfe61dff2400e3782258e4a0323f22674cd6b0a03a9348947
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/container.jpg HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/css/lazaruz.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:17 GMT
content-type: image/jpeg
content-length: 4633
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-1219"
expires: Sun, 31 Dec 2023 18:41:17 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FW%2FyYcIUfu7ApsJCimH4jWlBbil8OBE5hnmfouEUueMatEt57CG%2Fc%2BDeu8ux3ba4AZccg7swEc4FPb9OONVQ50Ks4govE21bBinIr7qsB7D4MbOXVsdGR2P3APxpbAuyvhR%2BuXYoeMg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed76a4fdff56c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/event-notification.png
200 OK 14 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/event-notification.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 750 x 129, 8-bit colormap, non-interlaced\012- data
Hash 7f3e573bc0f0353f0e1b422bfdcac4ce
3abbd5c15c99fad3634eb95363fe7d4a2cac6dc7
fa3843664ab03410d2edda0f611de17d4e130b072532957eda65a2f7a6100710
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/event-notification.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/css/lazaruz.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:17 GMT
content-type: image/png
content-length: 14162
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-3752"
expires: Sun, 31 Dec 2023 18:41:17 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hgmUoTnHz1skgABA0LuYMSL3BWIIL%2Fj3mwWRp4%2F55rYVaxBo%2F%2F%2F9nF94LWBvU74D0iBk8EbS5QGyLrE9fYI3L1oMwK17ThOgGdok4y3Yy%2FayF1RYmENhsUZroloPdSvEHicxU17Ools%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed76a50e0c56c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/event-title.png
200 OK 28 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/event-title.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 1135 x 306, 8-bit colormap, non-interlaced\012- data
Hash e021639e47c88ec4fe7ab3b9bb45df24
18305d85dbeed2ab58dbeaf945e4f378536ce21d
3a905c4a621e3563958980cebd9d9f6694ab38f597319aafb4ae68d382c09dce
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/event-title.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/css/lazaruz.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:17 GMT
content-type: image/png
content-length: 28213
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-6e35"
expires: Sun, 31 Dec 2023 18:41:17 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BsPetUW981ZoCG1%2B5KbKhZVprJFexZQPp%2F%2FvRNSRy5kto7UHEUNf7cFM0ULcziv6bU1elePTD5e%2B%2BUYXMFvXA1CU3PJlStvWqEkxBa%2BU92yvINhRAQW60H%2FjbS0lSd5RAEMZKT1l9gk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed76a4fe0b56c6-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 14964, version 1.0\012- data
Hash d6d554615ae9902f2173476e77d079fa
b5064acc8ba1c63153bfab733b915092e2b62cb6
4a0ce7a531a41b6fb56b8027541951ffe1ad67ab9e49a12ee4816247178d5bca
GET /s/teko/v20/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dulliusimoveis.com.br
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14964
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 18:32:51 GMT
expires: Thu, 28 Nov 2024 18:32:51 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 21:55:07 GMT
content-type: font/woff2
age: 173306
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 14964, version 1.0\012- data
Hash d6d554615ae9902f2173476e77d079fa
b5064acc8ba1c63153bfab733b915092e2b62cb6
4a0ce7a531a41b6fb56b8027541951ffe1ad67ab9e49a12ee4816247178d5bca
GET /s/teko/v20/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dulliusimoveis.com.br
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14964
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 18:32:51 GMT
expires: Thu, 28 Nov 2024 18:32:51 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 21:55:07 GMT
content-type: font/woff2
age: 173306
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ibb.co/PYpHF6b/Twitter-Show-Password.png
200 OK 28 kB URL GET HTTP/2 i.ibb.co/PYpHF6b/Twitter-Show-Password.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 656 x 656, 8-bit/color RGBA, non-interlaced\012- data
Hash 2fd203703821d5ce5d18bee2a51b779a
a78d7b1369ce8bc34de57909af142043cae446f0
6b82611fa96f118128b0db9692dd982ca0fe79b1b4d8048946880600cc4f97c8
GET /PYpHF6b/Twitter-Show-Password.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 18:41:17 GMT
content-type: image/png
content-length: 28355
last-modified: Tue, 17 Jan 2023 04:04:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
dulliusimoveis.com.br/links/pubg-skin-V6/img/oke.png
200 OK 497 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/oke.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 1500 x 441, 8-bit/color RGBA, non-interlaced\012- data
Size 497 kB (497124 bytes)
Hash b27b3ca97e9ff7459fd9adfcc4614a55
688417e395ead5034ecd2568ef6a015a4cac4186
a77d25b3926fa43b27e8f08806d31306b475928beea0c87fa62400cd6727de9d
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/oke.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/css/lazaruz.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:17 GMT
content-type: image/png
content-length: 497124
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-795e4"
expires: Sun, 31 Dec 2023 18:41:17 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fvJM6DSYZNGpzfilNAS8JjlyWVXbsTGNpzgRcHo6511jwAQvbCtcKORDR5Z%2ByXuZZ344WowXy3TWBPV8zUaxLxKXM1Q6IpGOJPHrViCqeInvnOl2PEcvFh9FQYc%2Fyh80SoqVk7oeUBU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed76a50e1456c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/img/lazabox.png
200 OK 160 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/img/lazabox.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type PNG image data, 640 x 858, 8-bit colormap, non-interlaced\012- data
Size 160 kB (159650 bytes)
Hash 24fc7c72be98d6c244b0b137fab9ee7c
e823e88554a5f3641b55974ec585ec5d69169438
8d997a79bfcbc1d22779a8bd379286d8a9094fd0394a07ead6e067d166a0c7ac
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/img/lazabox.png HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/css/lazaruz.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:17 GMT
content-type: image/png
content-length: 159650
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-26fa2"
expires: Sun, 31 Dec 2023 18:41:17 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xUtiS4e7YInjJo9OQ9QvSOUHjApzaCW2gGXc2doF1wo0LFOUgjeinfR4y3ZzjIajLv13mpLY0mD2ZkNLcMIfLPbLYlaLVTmIoZwBDAAKCOEw3snWJifZpth82j4IN7g51efzJ94V%2FT0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed76a4fe0856c6-OSL
alt-svc: h3=":443"; ma=86400
www.pubgmobile.com/en/images/nav_language.svg
200 OK 675 B URL GET HTTP/2 www.pubgmobile.com/en/images/nav_language.svg
IP
ASN #20940 Akamai International B.V.
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerDigiCert Inc
Subjectwetv.acc.qq.com
Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F
ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (1107), with no line terminators
Hash d8ba211bb1be1a15bf5b0143ca1b009a
215203609a551dcaccf6e434508623f302635f86
a441182568ad88fa9c54384de94a77f64148d3d54df66ea1beff4a11100967c6
GET /en/images/nav_language.svg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Mar 2022 13:24:18 GMT
etag: "62387c82-45b"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 675
date: Fri, 01 Dec 2023 18:41:18 GMT
X-Firefox-Spdy: h2
dulliusimoveis.com.br/links/pubg-skin-V6/fonts/laza.ttf
404 Not Found 982 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/fonts/laza.ttf
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size 982 kB (982532 bytes)
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/fonts/laza.ttf HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Fri, 01 Dec 2023 18:41:18 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9kv4x3hmEXITxPTfoIEWV4RkHtwKOo7R13TPDrOd%2BHpXY3xYqYct%2FKMPew77aFTfK4gut4v4kCgf0E41PKqpXQokmmSrGEGdZIvJ%2BFAuji2ONHVoq3sZXoViH1pad3cDjp%2FcL5XxvX8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed76a7291e56c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
i.ibb.co/pZDr8sd/Twitter-Hide-Password.png
200 OK 28 kB URL GET HTTP/2 i.ibb.co/pZDr8sd/Twitter-Hide-Password.png
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 656 x 656, 8-bit/color RGBA, non-interlaced\012- data
Hash 8d1f08b46884df302bf7300fc234832c
5735d57b6fa211c400d439095d5ff2f5bb57e691
e4cff1f68b85c3343554090b3479273a54e5eed2dbb3e56ceb9f86c4ebe8b0e7
GET /pZDr8sd/Twitter-Hide-Password.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 18:41:18 GMT
content-type: image/png
content-length: 28029
last-modified: Tue, 17 Jan 2023 04:04:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 31 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 18:48:06
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: dd809c84048d5afa8e77adc8acacd559
cdn-cache: HIT
cf-cache-status: HIT
age: 830251
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82ed769dfb4a7127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
dulliusimoveis.com.br/cdn-cgi/challenge-platform/scripts/jsd/main.js
302 Found 7.4 kB URL GET HTTP/3 dulliusimoveis.com.br/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Fri, 01 Dec 2023 18:41:17 GMT
cache-control: max-age=300, public
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
vary: accept-encoding
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cLN%2Bm2EtzYeazjMGbPulIIkC3rrXWOuIYqAw%2FIozGpBnbikQW5l4vkHtl1rVx%2BivTUTvwwSVnnYahOKNzHbBIPK76UYrfNM%2FfcQPsVkpIzz4QaPI%2B2S6ppvHvGcDnCluwejupo7pLM0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ed76a6e8d556c6-OSL
alt-svc: h3=":443"; ma=86400
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 31 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dulliusimoveis.com.br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 18:48:06
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 94888cbd125a83d87db46d1be77d5a9c
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82ed769e4abab50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
dulliusimoveis.com.br/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 1.2 kB URL GET HTTP/3 dulliusimoveis.com.br/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type HTML document, ASCII text, with very long lines (1271), with no line terminators
Hash 40d981045a7516cdadd00e8dccc9c58d
8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3
71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: application/javascript
last-modified: Tue, 28 Nov 2023 16:06:21 GMT
etag: W/"65660ffd-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t36S1PnZx0HSpSDTJEtyGK%2F2ZkH1dReRkcQ%2FeyP8BnTeN3PCLH4lP%2F1D%2FpUwdGUhfEfnjRGNyYDHPbohv2PnT%2B8ICAJpj8EdF%2Bl4ev9x28Yj0Hy8qPhEo3CKqRYqYRSQ1JiOLB5DJCY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769e1bde56c6-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sun, 03 Dec 2023 18:41:16 GMT
cache-control: max-age=172800, public
content-encoding: gzip
dulliusimoveis.com.br/links/pubg-skin-V6/fonts/laza.woff
404 Not Found 146 B URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/fonts/laza.woff
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/fonts/laza.woff HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 01 Dec 2023 18:41:17 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VujAOhq9xnBT4i4uIEb5MvBADOvc6gguso6xQ6HnlacL0PNAFqKy96L8CtO0tlY9UbejuDfGkXAWSi1pLzGfLNQJDKWC9ypklw8U4B7DDWb7JYfKif9E2JpKtPU7WLkdv1gni4ZRO7E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed76a6982c56c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/css/twitter.css
200 OK 3.4 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/css/twitter.css
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type ASCII text, with very long lines (3663), with no line terminators
Hash 2f138b9153a1305d5a15db20596b1236
a99c093c3ce05c528664977a0fac8c1fa44c66e5
193b40ddcc10aa1df21528b7c8df9935fc71e503376971a0d67ce61d67a58aa4
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/css/twitter.css HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: text/css
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
vary: Accept-Encoding
etag: W/"656a27e4-d36"
expires: Sat, 02 Dec 2023 06:41:16 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wy7Sh8VKA%2FfxDvCj%2B9lbfJNv33ROMQ0d1CixZnGMoGAAYlYoIZ5LojGsYlSSUpPCtcoKfXDpeeSq%2B5pyBH%2Fbp8RgpblMDr6VD6pfFwHkPkp22xaySZ6j9xosQlllLAZwzpqmPJ26BkU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ed769d8b0756c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
site-assets.fontawesome.com/releases/v6.4.0/css/all.css
200 OK 510 kB URL GET HTTP/2 site-assets.fontawesome.com/releases/v6.4.0/css/all.css
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E
ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (52040)
Size 510 kB (509883 bytes)
Hash 78f5161e4fd6d47acd0ca77ced2b3b1d
0a1085c73a9e2185b7df9acafbe3468e73f237c7
47aa5aff3a5b873f488c92005ca3ffd0a939ddc4707ec8dd8a4e0e8dff653ab4
GET /releases/v6.4.0/css/all.css HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: text/css
x-amz-id-2: 6PlPBSjIgRvdKHA5ktMz2yEeuCvh23fIy21oVzR4Zqf4o79jwPM+GDwqzKIaUI67RpC7Sv40vKRaOzHMh3ygrQ==
x-amz-request-id: 8F59EKXS65FKMKV7
last-modified: Fri, 24 Mar 2023 15:16:40 GMT
etag: W/"78f5161e4fd6d47acd0ca77ced2b3b1d"
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
age: 1326
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769e2c1356c6-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
dulliusimoveis.com.br/links/pubg-skin-V6/css/fonts/laza.woff
404 Not Found 146 B URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/css/fonts/laza.woff
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/css/fonts/laza.woff HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/css/lazaruz.css
Cookie: cf_clearance=cJEpGFeaZ2AANpsrSPpIDSCHysnc4plDMpclhPQn9Vw-1701456078-0-1-730ca2d2.73a07051.5b213570-0.2.1701456078
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 01 Dec 2023 18:41:18 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TCYK%2FTx5QhAvQtlIkg%2BMXRd0Z9ezE96c1mZszfoOJcE0ogzU4PT8PgtW0EyTqrm0s%2F%2B7B9dhIL%2BM%2B2xNht%2FpSBR%2BfHoRS9iaqwyk4RsnyM4dnnUvgYSgeFxdPvaCkeynCHJyGQc%2FDnY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed76a9bd2f56c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/css/fonts/laza.ttf
404 Not Found 146 B URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/css/fonts/laza.ttf
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/css/fonts/laza.ttf HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/css/lazaruz.css
Cookie: cf_clearance=cJEpGFeaZ2AANpsrSPpIDSCHysnc4plDMpclhPQn9Vw-1701456078-0-1-730ca2d2.73a07051.5b213570-0.2.1701456078
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 01 Dec 2023 18:41:18 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mLjohjAHSYNEdvYvcvOGcJtDGvL%2Fn1%2BPxFpgSI%2BTobcJV5jfOg8ng5am9K4472ANpHOb70l6PoZB6wN7v7%2FuJ5EvdkRl2o4ZwGvBrVOvL5DJ0Pjlc%2FQ9Xt9LDc4mnDDnEFQf79aahJs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed76aa9e1456c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
200 OK 7.4 kB URL GET HTTP/3 dulliusimoveis.com.br/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type ASCII text, with very long lines (7351), with no line terminators
Hash 1629972918fe4e80545bd3fd8b79f820
6f84db0335b18278d6825f3c268314a79ffc2ed7
01c5023803a466bdf351ec51fe55786cd913f5889cb70489d73adefc480cbdb5
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:17 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
vary: accept-encoding
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JAhECLYad5Y3PKEgHY4A6XCc%2BddHN3GyMb0gva8R58Xe9RABM7CHJObyL8h%2FqO0DTFk6e86Z9I8bKuOkYUr9tSy%2FFtr2lq4GYfoFS%2FskhMMvbpuACKbWrRzTiVecMM4jk5AckQznkSc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ed76a7292656c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/cdn-cgi/challenge-platform/h/b/jsd/r/82ed769b0ee2569a
200 OK 0 B URL POST HTTP/3 dulliusimoveis.com.br/cdn-cgi/challenge-platform/h/b/jsd/r/82ed769b0ee2569a
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Tencent
POST /cdn-cgi/challenge-platform/h/b/jsd/r/82ed769b0ee2569a HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12238
Origin: https://dulliusimoveis.com.br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:18 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=cJEpGFeaZ2AANpsrSPpIDSCHysnc4plDMpclhPQn9Vw-1701456078-0-1-730ca2d2.73a07051.5b213570-0.2.1701456078; path=/; expires=Sat, 30-Nov-24 18:41:18 GMT; domain=.dulliusimoveis.com.br; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ozvHDrx52H603P7rwURMputuuotGE%2BRNBhNnmL%2BBDIX6I8yoFxSWWmae%2BNBo5YZq5hJGR1Zf3KaROielwGcxpSK4fhEbZgwPs2lwoUOeBkZ6OrO6r2H5NF1HLNZ5wDepfxpkT9MYihI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ed76a90c0656c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.pubgmobile.com/common/images/icon_logo.jpg
200 OK 982 kB URL GET HTTP/2 www.pubgmobile.com/common/images/icon_logo.jpg
IP
ASN #20940 Akamai International B.V.
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerDigiCert Inc
Subjectwetv.acc.qq.com
Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F
ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 1024x1024, components 3\012- data
Size 982 kB (982437 bytes)
Hash b83d8d3e9beecfac081f4e742d27661c
448330670bef8c2ee17baf6d2410ca974341cb88
5899c82b2f0563679a9c1ee79b5b28f2545864d95c7627c1a70e36a2f034497d
GET /common/images/icon_logo.jpg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: image/jpeg
content-length: 982437
last-modified: Mon, 30 Nov 2020 12:10:45 GMT
etag: "5fc4e145-efda5"
accept-ranges: bytes
cache-control: max-age=175
expires: Fri, 01 Dec 2023 18:44:13 GMT
date: Fri, 01 Dec 2023 18:41:18 GMT
X-Firefox-Spdy: h2
dulliusimoveis.com.br/links/pubg-skin-V6/css/lazaruz.css
200 OK 27 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/css/lazaruz.css
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type assembler source, ASCII text
Hash bedfdc6cfd098f90c8a92ec5ec5dc972
2fac3adc3a96da07a5e8a7a28a4c3876613ac389
fafc9f09bc7b9625dd61be059ab16d3ccd6fc6affa919c90de57c5afcbfcb9b7
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/css/lazaruz.css HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: text/css
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
vary: Accept-Encoding
etag: W/"656a27e4-69ae"
expires: Sat, 02 Dec 2023 06:41:16 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xjTKOwJ5zj5M0gVatHbd5zhUBcENJvtja2Zff71R8yNQiD4J%2BC7uqFuLRw7Pp9Fz2JOQXEgNTzzztadQs7U9PxekifrXXIveDGB3clrmAPgRAfbDauFXrqWNNsEUEPb79iwxeABz%2F0E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ed769d7af856c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500
200 OK 12 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash 28abeed290ed65409b9fdac0b8ada4dc
e1b078d816c00c38edcda8f6da63773e43b6bb9b
a54cbba9c5d519add8cafd17df2d5a97757f7f7327667718bb19e1340c5c5b25
GET /css?family=Roboto:300,400,500,700|Teko:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 01 Dec 2023 18:41:17 GMT
date: Fri, 01 Dec 2023 18:41:17 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Teko&display=swap
200 OK 1.1 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Teko&display=swap
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1159), with no line terminators
Hash 0b52e2c4b5132ebd94353dab35b70fdc
33909660c8b09cf12a48365b48805525825ea862
ef661f53630207bdf0a86068cf51be16e47c34e95673ee6712332fd29fa6fbb2
GET /css2?family=Teko&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 01 Dec 2023 18:41:17 GMT
date: Fri, 01 Dec 2023 18:41:17 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dulliusimoveis.com.br/links/pubg-skin-V6/js/lazaruzjj1saghf!.js
404 Not Found 146 B URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/js/lazaruzjj1saghf!.js
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/js/lazaruzjj1saghf!.js HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 01 Dec 2023 18:41:17 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CPwlvhbIoWfopwuy%2BwNs9ahgS4XWHNIbTqGEf6bn%2F8zDgMhTf1Q2w%2ByJapZbaXsIJxnrPYW5c7%2F%2B2qYz4FBciyVpQx01ztv%2Bi5BWVsv8q%2B2O1kbIs5IK9CAjtjKuUaHgniiXpELvPc4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed76a5ced156c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/css/lazaruztanim.css
200 OK 0 B URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/css/lazaruztanim.css
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/css/lazaruztanim.css HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: text/css
content-length: 0
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
etag: "656a27e4-0"
expires: Sat, 02 Dec 2023 06:41:16 GMT
cache-control: max-age=43200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DcQAIBMnbdFRqJtXkn1mJNhwBypoUryfpqP7gQYNJqdcT9hksJcdddBkS79Sxtbjwh%2FhxKj8VQplPxSmH%2BQRcTWfUA2dPoJAJ8tSZs6k6X4r8lJaVrpQ2tIMixBTpGIhEmrVqR%2FMwZA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769d7afa56c6-OSL
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/css/facebook.css
200 OK 4.1 kB URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/css/facebook.css
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type ASCII text, with very long lines (4392), with no line terminators
Hash 3adc29a32c52542550c5c29cf3745026
535971433c82b138b250f7c921b36f3f1152d908
1c6b34f563e3dd9d9e6c582637924e10dbee2b77003a16716952d8d71981a320
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/css/facebook.css HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: text/css
last-modified: Fri, 01 Dec 2023 18:37:24 GMT
vary: Accept-Encoding
etag: W/"656a27e4-1009"
expires: Sat, 02 Dec 2023 06:41:16 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sU%2Fm47ZurMlUwXyBua%2BKpCYDAKV7u8A5WAEY7pBfCi%2BFQ7f3n5TDKP9v0C3qL7TbadB97iWvsn1Q%2BlCSxiuVAz0XOU3%2BpKWA7TYyvo9vq29VgEIEnTiyQU%2FPfOFVFNTqLwh00jUlTrE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ed769d8afb56c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/js/lazaruzjj1saghf!.js
404 Not Found 146 B URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/js/lazaruzjj1saghf!.js
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/js/lazaruzjj1saghf!.js HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 01 Dec 2023 18:41:16 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JtG6TLRniT29i3%2FFiUKeDBholMB27n1gSWnsekG%2FfYMK84u6z5PiB9TwP2%2FOXGElsQeYFF923ZGWcN2Omm0UKNz0qdrOOHESF86Fid0unp9xbNi5AETeRk1Jep9XYAuwJuKQWPVbn%2FM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed769e2c1156c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dulliusimoveis.com.br/links/pubg-skin-V6/css/fonts/laza.woff2
404 Not Found 146 B URL GET HTTP/3 dulliusimoveis.com.br/links/pubg-skin-V6/css/fonts/laza.woff2
IP
Requested by https://dulliusimoveis.com.br/links/pubg-skin-V6/jj1saghf.php
Certificate IssuerLet's Encrypt
Subjectdulliusimoveis.com.br
Fingerprint01:68:D5:3B:D2:CF:2C:23:DB:A0:C5:87:E1:7C:13:14:78:15:3F:A9
ValidityWed, 11 Oct 2023 12:45:27 GMT - Tue, 09 Jan 2024 12:45:26 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /links/pubg-skin-V6/css/fonts/laza.woff2 HTTP/1.1
Host: dulliusimoveis.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dulliusimoveis.com.br/links/pubg-skin-V6/css/lazaruz.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 01 Dec 2023 18:41:18 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KPw%2FdaITOZ0glS4OBnvlEVhIbXp8vkXwMmCwQXNN4bzNdO5AjALbnkS97TChTmb1uCPZUW4wJ1D%2BKOk9nmzLjXGPfkvbL3lt%2Br95q9yLtQyeepoKUfmBXA47EWb1QlIcXIfdKe6xzdg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed76a91c4756c6-OSL
alt-svc: h3=":443"; ma=86400
172.67.201.109
162.19.58.160
104.17.25.14
95.101.11.144