Overview

URL roccastel.com/ut-animi/documents.zip
IP192.185.211.112
ASNUNIFIEDLAYER-AS-1
Location United States
Report completed2022-06-23 23:30:37 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2022-06-23 2 roccastel.com/ut-animi/documents.zip Malware
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (12)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
[Mnemonic Passive DNS] content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-06-23 04:53:43 UTC 54.230.111.64
[Mnemonic Passive DNS] ocsp.digicert.com (1) 86 2012-11-29 12:49:49 UTC 2022-06-23 16:00:56 UTC 93.184.220.29
[Mnemonic Passive DNS] push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-06-23 04:55:40 UTC 35.160.51.228
[Mnemonic Passive DNS] shield.sitelock.com (1) 65503 2012-09-29 23:33:57 UTC 2022-06-23 09:26:56 UTC 45.60.14.54
[Mnemonic Passive DNS] pixel.wp.com (1) 2545 No data No data 192.0.76.3
[Mnemonic Passive DNS] img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2022-06-23 14:13:18 UTC 34.120.237.76
[Mnemonic Passive DNS] r3.o.lencr.org (4) 344 2020-12-02 08:52:13 UTC 2022-06-23 04:53:45 UTC 23.36.76.226
[Mnemonic Passive DNS] firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2020-05-25 20:01:47 UTC 54.230.111.7
[Mnemonic Passive DNS] contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239
[Mnemonic Passive DNS] roccastel.com.br (39) 0 2021-12-09 21:19:06 UTC 2021-12-09 21:19:06 UTC 192.185.211.112 Unknown ranking
[Mnemonic Passive DNS] ocsp.pki.goog (2) 175 2017-06-14 07:23:31 UTC 2022-06-23 11:59:42 UTC 142.250.74.3
[Mnemonic Passive DNS] roccastel.com (1) 0 2015-04-26 06:53:11 UTC 2021-04-26 21:32:20 UTC 192.185.211.112 Unknown ranking


Recent reports on same IP/ASN/Domain

Last 9 reports on IP: 192.185.211.112

Date UQ / IDS / BL URL IP
2022-07-06 06:22:33 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-07-04 22:23:54 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-07-03 12:00:27 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-07-02 12:17:47 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-07-01 21:53:59 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-06-28 07:55:12 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-06-26 20:35:09 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-06-26 08:41:00 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-06-18 16:54:54 +0000
0 - 0 - 1 https://roccastel.com/ut-animi/documents.zip 192.185.211.112

Last 10 reports on ASN: UNIFIEDLAYER-AS-1

Date UQ / IDS / BL URL IP
2022-07-07 03:59:28 +0000
0 - 0 - 2 disodesign.com/tag/facebook 50.87.150.45
2022-07-07 03:59:13 +0000
0 - 0 - 1 sgicorp.com/userfiles/files/90709833802.pdf 192.185.88.205
2022-07-07 03:57:30 +0000
0 - 0 - 2 ricohcounters.com.co/DOS83/new_87392/data/ 192.232.249.199
2022-07-07 03:53:48 +0000
0 - 0 - 5 labglassware.in/css/images/Home 162.241.148.13
2022-07-07 03:50:23 +0000
4 - 0 - 2 www.magazinenook.com/clean/login.php 50.87.149.252
2022-07-07 03:48:51 +0000
0 - 0 - 3 www.pestcure.com.au/assesment/auth/auth/office/ 192.185.198.120
2022-07-07 03:46:09 +0000
0 - 0 - 2 masjiddemo23.uzhosting.net/gggnbccuu/enterpas (...) 192.185.88.147
2022-07-07 03:45:57 +0000
0 - 0 - 2 mdpls.whwp.in/ 192.185.114.102
2022-07-07 03:45:42 +0000
0 - 0 - 2 seslightingaustralia.com.au/mysfolder/OfficeN (...) 192.185.98.70
2022-07-07 03:43:45 +0000
0 - 0 - 1 annieslodge.com/DOC00229XE/id=12/www.file.com (...) 192.185.26.78

Last 9 reports on domain: roccastel.com

Date UQ / IDS / BL URL IP
2022-07-06 06:22:33 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-07-04 22:23:54 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-07-03 12:00:27 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-07-02 12:17:47 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-07-01 21:53:59 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-06-28 07:55:12 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-06-26 20:35:09 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-06-26 08:41:00 +0000
0 - 0 - 1 roccastel.com/ut-animi/documents.zip 192.185.211.112
2022-06-18 16:54:54 +0000
0 - 0 - 1 https://roccastel.com/ut-animi/documents.zip 192.185.211.112


JavaScript

Executed Scripts (35)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (59)


Request Response
                                        
                                            GET /ut-animi/documents.zip HTTP/1.1 
Host: roccastel.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         192.185.211.112
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 23 Jun 2022 23:30:22 GMT
Server: Apache
Location: https://roccastel.com.br/ut-animi/documents.zip
Content-Length: 255
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   255
Md5:    89ea76e75903819f8ec066b036cc6359
Sha1:   c39377faba9ef8e400948c94f7ada0d8a9064934
Sha256: 37eae42c2bc19642e5c2c950db9289e85ef6b3fa4a7b80b7cf98f182511bd473

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "22A7AFFA696C3188DD074DEB68A2EC519EA227AC839D0238C9F82660B9E14D6A"
Last-Modified: Tue, 21 Jun 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4307
Expires: Fri, 24 Jun 2022 00:42:09 GMT
Date: Thu, 23 Jun 2022 23:30:22 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 23 Jun 2022 22:33:44 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yaJheYTvH4tAjHIBLqgeBFMNnZ326TAFa0ccGSYLEZLHk-CQPT1O9w==
Age: 3398


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    91dd975a7b17b2922dd23c0e49314e40
Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-06-30-19-51-38.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.64
HTTP/2 200 OK
                                        
content-type: binary/octet-stream
content-length: 5348
last-modified: Wed, 11 May 2022 19:51:39 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 23 Jun 2022 02:10:52 GMT
etag: "48ca0beea419a9039591cf1aee5179e0"
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F4kwveDosoQtXA2NzLTiP_Seidypke4K3bTiCdKuFvpJZYqUTECLnA==
age: 76771
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    48ca0beea419a9039591cf1aee5179e0
Sha1:   9e92629f505fcc07aab51221e8fe62197a23e307
Sha256: 630a5f110337b4a4876aa85c21107d9e8f2550bcc60f023a4777d895b17399fd
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
                                        
server: nginx
date: Thu, 23 Jun 2022 23:30:22 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Thu, 23 Jun 2022 23:11:58 GMT
Expires: Thu, 23 Jun 2022 23:39:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: N_i8hpbtyY3t3otBN-raUjmCVCFnx9aD3IYeECABcwZCZFuj53Ho3w==
Age: 1105


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "94D0D1E7CF3B6EA3F6AF3730634B3E646D8CDC20B5041941243978FC99522DAE"
Last-Modified: Tue, 21 Jun 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21552
Expires: Fri, 24 Jun 2022 05:29:35 GMT
Date: Thu, 23 Jun 2022 23:30:23 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3846
Cache-Control: max-age=121271
Date: Thu, 23 Jun 2022 23:30:23 GMT
Etag: "62b41f40-1d7"
Expires: Sat, 25 Jun 2022 09:11:34 GMT
Last-Modified: Thu, 23 Jun 2022 08:07:28 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Eqq0ae/rJLiA3kYKyvFFpA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.160.51.228
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: psRNZkhYUwMZe0kjI74MWtQghas=

                                        
                                            GET /ut-animi/documents.zip HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         192.185.211.112
HTTP/2 404 Not Found
                                        
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://roccastel.com.br/wp-json/>; rel="https://api.w.org/"
set-cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; expires=Sat, 25-Jun-2022 23:30:23 GMT; Max-Age=172800; path=/; secure _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9; expires=Fri, 24-Jun-2022 00:30:24 GMT; Max-Age=3600; path=/; secure
vary: Accept-Encoding
content-encoding: gzip
content-length: 16914
content-type: text/html; charset=UTF-8
date: Thu, 23 Jun 2022 23:30:23 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Size:   16914
Md5:    43746370d8544517c1a49a5361e6dd20
Sha1:   6472fe879a5f13bebb601df03ea8ba33095fcb9c
Sha256: 3f88be874ae7af91da4384015022921e2f1d89933fd2689921731726d21ee05a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 23 Jun 2022 23:30:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 07 Jun 2019 20:45:02 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1298
content-type: text/css
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4186), with no line terminators
Size:   1298
Md5:    91bab39b98d7e5c1632717b9ebe349e4
Sha1:   e639a447d06fc7827be5b5b35d603ff16b5f7bb1
Sha256: 47ff151faeb23a5654f6ec58b404e51193f6714849a69de241c2ee79662f74c6
                                        
                                            GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=7.2.2 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Mon, 25 Apr 2022 15:08:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1637
content-type: text/css
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4933), with no line terminators
Size:   1637
Md5:    971cfc62ecc92ebe1174a2c80671a10f
Sha1:   86989b6ba38041063eab75516aa10bfc3fc9a55f
Sha256: e51fd87d27a0dedfe4afb52aab0d8708d369be1e16ff09b90245c145bd8847ba
                                        
                                            GET /wp-content/plugins/formidable/css/formidableforms.css?ver=552157 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Thu, 05 May 2022 21:57:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14722
content-type: text/css
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (61639)
Size:   14722
Md5:    2430b473d9c0ed9d8f1677d05fa8d8e2
Sha1:   7a515f25466e464c3c1c9cc2be010f38c2b29620
Sha256: 32fc64cd014e997e7a2927697a1780d6c40e575ea45528cbab9e40b2b11422f9
                                        
                                            GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Tue, 29 Sep 2020 15:53:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3239
content-type: text/css
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11256), with no line terminators
Size:   3239
Md5:    1054d0d53548e8bae51665b11acc6413
Sha1:   2eea6a05fe18db61fff58c431d34a86b3e0b7ade
Sha256: cb8b0f0f3f871d9776da32ee6d9e1af9277a211be61e97a831c7f8c98fbebfae
                                        
                                            GET /wp-content/themes/Total/assets/css/wpex-mobile-menu-breakpoint-min.css?ver=5.3 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 10 Dec 2021 02:55:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 552
content-type: text/css
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1915)
Size:   552
Md5:    2c1a72c10ccb3f72dc14504f703089f9
Sha1:   25699ba558f7ce7b507f22f6235f5cd43ff66c33
Sha256: ca09088405e151ca00fb367db145e19abba061d7c54b82b5a34946ba2c1e2fa5
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 23 Jun 2022 23:30:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/Total/assets/css/wpex-woocommerce.css?ver=5.3 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 10 Dec 2021 02:55:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12977
content-type: text/css
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (45289)
Size:   12977
Md5:    dd488e51e1d49f2693805e70bb6db95d
Sha1:   0499f72ba9663317576c1203efa4bb529dfa3466
Sha256: fc44cecdd3c8b6b841384dba4f5dcefd31521e43799fe0768351cfe1722d1fd9
                                        
                                            GET /wp-content/themes/Total/assets/css/wpex-wpbakery.css?ver=5.3 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 10 Dec 2021 02:55:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4764
content-type: text/css
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (19758)
Size:   4764
Md5:    987a916867716d238fba3e861284f203
Sha1:   a2b335d122a2d1fe0286bf899f5d7ace67587a84
Sha256: 3f6e2d311fa0f474170d16044077ecf7a0310c5a8ee170e30dd717d094745ea8
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.4.1 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Mon, 25 Apr 2022 15:08:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3957
content-type: application/javascript
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9139)
Size:   3957
Md5:    5f3c95f97f566ce33b859d6b874d116d
Sha1:   e47be9178d33d8d8eefda83c853b560aaed71413
Sha256: a0cea478b83a24f0c90bfaf776ed62fe8747395838a92d8c9f06ceb79b3e5918
                                        
                                            GET /wp-content/plugins/dk-pricr-responsive-pricing-table/inc/js/rpt.min.js?ver=5.1.6 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Sat, 11 Dec 2021 03:25:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 244
content-type: application/javascript
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   244
Md5:    090eb31e7c7e18d1c7e5f6827d054f93
Sha1:   0e02398e09a0fed368487cc7992ab582126f5f95
Sha256: 86d7b416d9c7d6a27ad6f3c750b39ffa2b7741134e48457017cd09dbd5eafbd6
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.4.1 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Mon, 25 Apr 2022 15:08:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1000
content-type: application/javascript
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1668)
Size:   1000
Md5:    0bebfb5722cbc8ac04e62aa40698be49
Sha1:   3bc5e4f29cb19a2d80d46dee242dabf7e42c0fd3
Sha256: 70d02eabbadbe176455a2bb53d8d567feca69847c067a5274987a8bdc65e3c05
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.4.1 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Mon, 25 Apr 2022 15:08:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1093
content-type: application/javascript
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2938), with no line terminators
Size:   1093
Md5:    769e9d3f7fc383ec1a02024e39730474
Sha1:   4f5a5edf28ed19b48c5e40747ec6896f0df8f09e
Sha256: 4636689d57889e984a7a1a1c6e2516b7a2d951407ca826aaf505c50002e2b486
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.4.1 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Mon, 25 Apr 2022 15:08:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1200
content-type: application/javascript
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (3037), with no line terminators
Size:   1200
Md5:    57b5945094a547e06221f8f949e6d335
Sha1:   76fc7361f00684ea29ffbf4b7d46e5429b8c245a
Sha256: f9d0da987075df31cc4cf8aed46bc193467ce7165568d83c8016e6fe904e72c3
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.4.1 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Mon, 25 Apr 2022 15:08:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 792
content-type: application/javascript
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2139), with no line terminators
Size:   792
Md5:    1ca3f41c13e0027acc45f0601f8b640f
Sha1:   cced34af0c6a59e9cee4229faa66ab39c7031506
Sha256: d3bc5eaf4c6be9473dbba690825cce9a1a6f4accb6721dae7875efef54942f41
                                        
                                            GET /wp-content/themes/Total/assets/js/dynamic/woocommerce/wpex-wc-functions.min.js?ver=5.3 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 10 Dec 2021 02:55:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1235
content-type: application/javascript
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (2917), with no line terminators
Size:   1235
Md5:    da783044d8d68615a5cd8357b4e7e0e8
Sha1:   86efabd05feab83c16e97329997eafac13755007
Sha256: 49900281db563b0a1dc267d6c45f72093dc9d1812ef0f5e9e40ab4125e32a007
                                        
                                            GET /wp-content/themes/Total/assets/js/vendors/hoverIntent.min.js?ver=1.10.1 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 10 Dec 2021 02:55:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 691
content-type: application/javascript
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1499), with no line terminators
Size:   691
Md5:    61c59c208d27b2f5f00d8433f9f94df7
Sha1:   bc902ff5f8a5e1e601516a16fad1af0cee4d963a
Sha256: da71f6f231923c816d57d950cf85932e3ea6480fb6475c9034af52255584fa5c
                                        
                                            GET /wp-content/themes/Total/assets/lib/ticons/fonts/ticons.woff2 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 10 Dec 2021 02:55:23 GMT
accept-ranges: bytes
content-length: 81932
content-type: font/woff2
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 81932, version 1.0\012- data
Size:   81932
Md5:    117e09308a26db92e7ccccbff0dee347
Sha1:   5d33f5e95f9c8f7a4276cbe02244c456a2118b64
Sha256: c3c4952c6281d664ba29ed966c7b43b312a9b01f1b0b2bf4f116ad0e76e67a01
                                        
                                            GET /wp-content/themes/Total/assets/js/vendors/jquery.easing.min.js?ver=1.3.2 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 10 Dec 2021 02:55:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 761
content-type: application/javascript
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2297), with no line terminators
Size:   761
Md5:    5074e0061b3170b7b4e703c1412768b6
Sha1:   aa8a6d459bce3a9aec19915d1225591f34648d22
Sha256: 219373dffc3b7a8c2c67bc3e1a7fc65029614355f869a06b246ff6129145e8e0
                                        
                                            GET /wp-content/themes/Total/assets/js/vendors/superfish.min.js?ver=1.7.4 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 10 Dec 2021 02:55:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1664
content-type: application/javascript
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3775), with no line terminators
Size:   1664
Md5:    525222f591d5ddd8b36d6fe2ca0d7d57
Sha1:   d81c8d9005e86e34771ca04734d116a08e519351
Sha256: a03cd56d983411c8b078671cea683c425c98a6ad78cc07b24f7b1ac43bab039e
                                        
                                            GET /wp-content/plugins/learnpress/assets/css/widgets.css?ver=62b4f78fb89bf HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Thu, 05 May 2022 21:57:35 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2252
content-type: text/css
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   2252
Md5:    b21fab1955035222254fccf72f7f162e
Sha1:   267702bf20ad508caff5fb2d38292c227dd75fa6
Sha256: 24801a73534cffa2bb5b2fe981c58394a519b37ba8866ac7ab43053617dd0bb1
                                        
                                            GET /shield/roccastel.com.br HTTP/1.1 
Host: shield.sitelock.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         45.60.14.54
HTTP/1.1 200 OK
Content-Type: image/png; charset=ISO-8859-1
                                        
Content-Length: 8218
Date: Thu, 23 Jun 2022 23:30:25 GMT
Server: lighttpd
Set-Cookie: nlbi_275317=NQK4TbXaoGAyyxRCmBeFbAAAAAC1TDgjrS6IjbcXI/qvB7PA; path=/; Domain=.sitelock.com visid_incap_275317=Bqkk3lbjQn+oixeoejc4uI/3tGIAAAAAQUIPAAAAAADcXLTwvJTwxfmCnGb/tBX/; expires=Fri, 23 Jun 2023 22:31:04 GMT; HttpOnly; path=/; Domain=.sitelock.com incap_ses_633_275317=l147fk0BNTS0akuWgt7ICJD3tGIAAAAAoWzlLDheHgaLXKQn/gRhWQ==; path=/; Domain=.sitelock.com ___utmvmtsuykvY=YxDskCmrLWg; path=/; Max-Age=900 ___utmvatsuykvY=TBmgXWY; path=/; Max-Age=900 ___utmvbtsuykvY=LZO XqTOjalU: StU; path=/; Max-Age=900
X-CDN: Imperva
X-Iinfo: 2-18828966-18828967 2NNN RT(1656027023708 26) q(0 0 0 0) r(0 4) U18


--- Additional Info ---
Magic:  PNG image data, 98 x 56, 8-bit/color RGBA, interlaced\012- data
Size:   8218
Md5:    d99b7d7fecc5da8bb46a5c61bb66d604
Sha1:   e82d258543b27b964e7f3174b1d5d0179eb5d959
Sha256: 005ba20a2831e60ae0f76fd4b734768de346c2d78ec833f67e02037b16a2acec
                                        
                                            GET /wp-content/plugins/dk-pricr-responsive-pricing-table/inc/css/rpt_style.min.css?ver=5.1.6 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Sat, 11 Dec 2021 03:42:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1755
content-type: text/css
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7846)
Size:   1755
Md5:    1ec77ea7bb27de908139883c24f6cc16
Sha1:   29fbe6f6cff007b734d0f2b1b22d04f37ef78c22
Sha256: 4c372445612f6e28a109e3707e2728f5cb1fa69e60d76cf1c368b5acda36005b
                                        
                                            GET /wp-content/themes/Total/assets/css/vcex-shortcodes.css?ver=5.3 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 10 Dec 2021 02:55:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5464
content-type: text/css
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21043)
Size:   5464
Md5:    d4a096a69ba0e24f542ddc4811230dd2
Sha1:   a9bac89804fe917fbc42b1f907ba71edae12e68a
Sha256: b75fe1adf4fbe10b84cb82eb639076988a0e75d9bc030897f9612e8654fa52a6
                                        
                                            GET /wp-content/uploads/2021/12/roccastel-imago-logo-header.png HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Thu, 23 Dec 2021 05:33:49 GMT
accept-ranges: bytes
content-length: 24768
content-type: image/png
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1267 x 197, 8-bit/color RGBA, non-interlaced\012- data
Size:   24768
Md5:    a283d26d74a1c69348be0527c8596e97
Sha1:   516b5104311ba13e45fef433ad74a11c75ea58d0
Sha256: 8248a86494a4c635ed9e050467125235e848ea6efd9d231068f9c1c5aafe98e7
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4618
Md5:    acdb97105af28a7066790c6748ae2e1e
Sha1:   65794d2c5a9d04f747faf370bc8bacd330e69e5a
Sha256: dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
                                        
                                            GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.9 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 10 Dec 2021 02:56:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16395
content-type: text/css
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (12602)
Size:   16395
Md5:    0037a4f54e08da3820effdb14e066c05
Sha1:   e6380be62a9beb312465b7440f3d7483bf2b42ee
Sha256: 049f49bae85c6647acf82b2390d121d8c0e212d0a6dc53ac8dff5dde31eb26da
                                        
                                            GET /wp-content/themes/Total/assets/js/vendors/supersubs.min.js?ver=0.3b HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 10 Dec 2021 02:55:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 481
content-type: application/javascript
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (866), with no line terminators
Size:   481
Md5:    c6efa199b216e09a5315afaa98dec07c
Sha1:   aa20f78d1551d94d17398cbd68928620a809027e
Sha256: 563999c0791c04234ffa75e99f5e861bed0446409f70aa8254f6907f465517c8
                                        
                                            GET /wp-content/themes/Total/assets/lib/ticons/css/ticons.min.css?ver=5.3 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 10 Dec 2021 02:55:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6736
content-type: text/css
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32239), with no line terminators
Size:   6736
Md5:    72769e14eefa304b475516e08b7cd8df
Sha1:   b50a0df8b416cff73bb0ca3ef459be4917645f43
Sha256: 8746ae4c3e5f7c18a688e5afec35cbcd26fb948e1bacb72369c34f11f6d42f67
                                        
                                            GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.7.0 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 10 Dec 2021 02:56:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 372
content-type: application/javascript
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   372
Md5:    0507d06596355ea2efd09bb9c5b0e46c
Sha1:   9ae0e8f7847222b09264ada703c182fd89011126
Sha256: fefb5c10a704ffcb6c905a785ec2af387ff7169dbe548fa4784cc5782797d4c2
                                        
                                            GET /wp-content/themes/Total/assets/css/wpex-mobile-menu-breakpoint-max.css?ver=5.3 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 10 Dec 2021 02:55:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 304
content-type: text/css
date: Thu, 23 Jun 2022 23:30:25 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (897)
Size:   304
Md5:    3ce76d826a109f6fcbaff6d44441f5d8
Sha1:   5a85553f650a9b526bd318ad7e1afd06aa8885ab
Sha256: 97e0c9bf60d6207c27cb66f920f2a1fc7ae5bfc3d2e81f73f924819ea8dee7e5
                                        
                                            GET /wp-content/uploads/2021/12/header-background_set.jpg HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Thu, 23 Dec 2021 05:20:48 GMT
accept-ranges: bytes
content-length: 53829
content-type: image/jpeg
date: Thu, 23 Jun 2022 23:30:25 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=664, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1000], progressive, precision 8, 1600x250, components 3\012- data
Size:   53829
Md5:    526eabe8300be52cc058e4190be62337
Sha1:   0d18151c4db7e91a8fdf2dc791642ece32a74ce4
Sha256: 0bf9f32a098ce6ad59ff4741fd8e33c0b2bff3eb4135b3c3b469abf077edd744
                                        
                                            GET /g.gif?v=ext&j=1%3A10.9&blog=206215244&post=0&tz=-3&srv=roccastel.com.br&host=roccastel.com.br&ref=&fcp=2932&rand=0.1084789208644984 HTTP/1.1 
Host: pixel.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.76.3
HTTP/2 200 OK
                                        
server: nginx
date: Thu, 23 Jun 2022 23:30:25 GMT
content-type: image/gif
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 6 x 5\012- data
Size:   50
Md5:    e4d673a55c5656f19ef81563fb10884c
Sha1:   1f2d8ed221d39329251ad3a6ff1edb20b7219443
Sha256: f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
                                        
                                            GET /wp-content/uploads/2021/12/headerwal2l.jpg HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Thu, 23 Dec 2021 05:58:12 GMT
accept-ranges: bytes
content-length: 674052
content-type: image/jpeg
date: Thu, 23 Jun 2022 23:30:25 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1384, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3840], progressive, precision 8, 1943x700, components 3\012- data
Size:   674052
Md5:    b1984e63448939b7aa5e5a972d0c353d
Sha1:   cb2230d5c83b90f8ca3a67db54bca93fdd207bb9
Sha256: 8b98534329b64f5caeb67487f9f81f3820b20602d95b047b271d9fb99946cca5
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Wed, 10 Mar 2021 15:07:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   39569
Md5:    a9b87e08549a87acf6b74cbb1fffacee
Sha1:   5772563cb315ed649c2e8c2eb774a5a43b2ddf5c
Sha256: 36210082c3ddd0942a728df34b87b0d4d19e879987d760767061b2165d8757a4
                                        
                                            GET /wp-content/uploads/2022/04/diarioanjo-pub-pp-600x575.png HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Mon, 25 Apr 2022 15:47:24 GMT
accept-ranges: bytes
content-length: 367469
content-type: image/png
date: Thu, 23 Jun 2022 23:30:25 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 600 x 575, 8-bit/color RGBA, non-interlaced\012- data
Size:   367469
Md5:    41e8058cc1cc5eb9a0a4bcfe74c9ba2b
Sha1:   e43f1104f8bfc2ce472c3603bf34dab4f963dc89
Sha256: 8f7c197ed35858130d929eec081f556f97ccd5ff5983e3c62e7ab7ab10b49135
                                        
                                            GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.7.0 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Fri, 10 Dec 2021 02:56:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   62431
Md5:    d98b798402f7db20df7700140fd2f889
Sha1:   b13abe947236c19ac6e8310704d96bca49f685f3
Sha256: 57b2047854d9a5a08dd5198c32bb841fc7087a89f8edcdf7f09b13ee942d9849
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1394332035FF30FC505CCB0EB81DD131660600CACDD2559D109B725075B69669"
Last-Modified: Tue, 21 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10176
Expires: Fri, 24 Jun 2022 02:20:01 GMT
Date: Thu, 23 Jun 2022 23:30:25 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1394332035FF30FC505CCB0EB81DD131660600CACDD2559D109B725075B69669"
Last-Modified: Tue, 21 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10176
Expires: Fri, 24 Jun 2022 02:20:01 GMT
Date: Thu, 23 Jun 2022 23:30:25 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8773da87-c09d-42d7-9054-5fd332193a06.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 10163
x-amzn-requestid: e50196c4-867f-4cd7-9d2f-de07b0c514a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UMdEUHjFIAMF6vA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b4dbb5-1cf97b3d0b970df06b091796;Sampled=0
x-amzn-remapped-date: Thu, 23 Jun 2022 21:31:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8g-6kAldCwE5olUMewrXMhVZvVLlgX3WPIYH4C8nJe8rydC9GVGE5Q==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Jun 2022 22:02:01 GMT
age: 5304
etag: "a63fe56db3c08a52bec457c869094fb37d4abdcd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10163
Md5:    486e472ddbc5dc4684b18d17e6cacd7d
Sha1:   a63fe56db3c08a52bec457c869094fb37d4abdcd
Sha256: 046c795f40b6f080bf9e97ee894e88126cb64fa87a3e3c96c990f25c310adbef
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd503013e-1d8c-401f-9cec-1ff9f66e12cc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 6301
x-amzn-requestid: 9626bf34-3a9c-4ceb-b1ce-a6850ac5e08e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UHxQ6GTwIAMFpBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b2fc05-3b334b5b16dea3084acc58e6;Sampled=0
x-amzn-remapped-date: Wed, 22 Jun 2022 11:24:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: NYjWJg3ZDJuiVVXOP2XhQba_4_Dj7cyfljOVt6EeUEHKeFZHfr316A==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Jun 2022 13:05:59 GMT
age: 37466
etag: "0d1c278b921fb50ab3e7c31851f099efbecbbbc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6301
Md5:    86fa458d383f4e14f204f22d50693fb6
Sha1:   0d1c278b921fb50ab3e7c31851f099efbecbbbc2
Sha256: 94629bc0b7076f2af81b4507f9fe8bd2b5cc71ea751957e38101e4220f3681e0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a9018db-9e51-4804-9c56-7ac1d2176356.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7541
x-amzn-requestid: 779e91c5-09a6-4677-b9af-db6164ebb546
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UJhf-GHDoAMF4vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b3af99-3fcfaf7b7fb299d957dd7c98;Sampled=0
x-amzn-remapped-date: Thu, 23 Jun 2022 00:11:05 GMT
x-amz-cf-pop: YVR50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CcwKacvVQnoJ0ekzaETeTbu4TNQm4k42NWhwK5zuHsZBNOBKejOc5w==
via: 1.1 ba55932f4947672586f0865cea81e028.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Jun 2022 00:26:11 GMT
age: 83054
etag: "042581a2f8d5f788b6dbf7c6c940a3952ae4bef9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7541
Md5:    0fe5340d565c2ab7d1b311321ed2f8a3
Sha1:   042581a2f8d5f788b6dbf7c6c940a3952ae4bef9
Sha256: 2085de5ba82db208e4e22402651fb0b795f66da76707c95550d4ebdb54f84c2f
                                        
                                            GET /wp-content/plugins/jetpack/css/jetpack.css?ver=10.9 HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Sat, 07 May 2022 11:39:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Thu, 23 Jun 2022 23:30:24 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   38558
Md5:    8a39c55dd1ceadb2b6ff617b21fe73f0
Sha1:   1439b90ef5137e1f7e7756192d747e3cb50e3e47
Sha256: aefcb8e393fc543a3e10cfc4fcd24fb881a21e0148b2e4f3361c9cc4e9a2cbac
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3892679f-4cba-4b4d-9999-d06aff9c2708.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 8993
x-amzn-requestid: 08f08197-4277-4810-82d0-c0e0fbc206e5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: T9Z0wFeZoAMFe-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62aed684-7b0350b01666a9782ce4b7ef;Sampled=0
x-amzn-remapped-date: Sun, 19 Jun 2022 07:55:48 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0yGnupHWNJtm8eX4dRno7ysl_RV8pMeZwm7o2NaLFbUwW3aE8zSeXw==
via: 1.1 a4479a6315f90864adc6175b280f8f44.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Jun 2022 05:57:27 GMT
age: 63178
etag: "b71ad03b98790dd12453b50ac6434a2d6b50c5cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8993
Md5:    4760b9caf6104b37434b30e11467dab9
Sha1:   b71ad03b98790dd12453b50ac6434a2d6b50c5cf
Sha256: 8e8d01b1e92d019dfead23f89323c85f540698328b42d780bfc9850e9185644d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b96f859-10eb-474c-8b8c-9e5902b28bd8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 4878
x-amzn-requestid: 3caca75d-3753-41f1-a4ec-277c173b26b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UJgx6FZ0IAMFbFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b3ae72-39f08dc910314e8f247ffd44;Sampled=0
x-amzn-remapped-date: Thu, 23 Jun 2022 00:06:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0PmqyPibimYVX8rYVY3HbTcsEGTrWDA5L40dzwo1fS0CCyJrgMJOJg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Jun 2022 00:24:25 GMT
age: 83160
etag: "1abc297d329369f4aee445a5eabab7fa089ce764"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4878
Md5:    c90b3735180499df633f9fc6272ff632
Sha1:   1abc297d329369f4aee445a5eabab7fa089ce764
Sha256: 00f8db77cec74be5fb70d1d5bd351fee3dfdc2d807a861184f28e47344a760ad
                                        
                                            GET /wp-content/uploads/2021/12/jjmarco-1024x1013.png HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Thu, 30 Dec 2021 14:21:40 GMT
accept-ranges: bytes
content-length: 769153
content-type: image/png
date: Thu, 23 Jun 2022 23:30:25 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1024 x 1013, 8-bit/color RGBA, non-interlaced\012- data
Size:   769153
Md5:    c33303bacd9e4ba065aef4b8176f1b83
Sha1:   773203d1cddd9e5211bf09762439987799947504
Sha256: 114cdaeef6c6cfd259438c673e2e0c3f1041f497f430fe055afdeba5e3530965
                                        
                                            GET /wp-content/uploads/2021/12/ico.png HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9; tk_or=%22%22; tk_r3d=%22%22; tk_lr=%22%22
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Sat, 11 Dec 2021 04:15:37 GMT
accept-ranges: bytes
content-length: 12072
content-type: image/png
date: Thu, 23 Jun 2022 23:30:25 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 263 x 263, 8-bit/color RGBA, non-interlaced\012- data
Size:   12072
Md5:    d494880eb21fccdced80a8c761a5ca56
Sha1:   54862c1573181ef549c10a125064d0cca6247465
Sha256: ac880d86293d914d840bf20c9c591437a4fd8366f0dc3c52858226cb1b6eb051
                                        
                                            GET /wp-content/uploads/2022/01/iconpush2022.jpg HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9; tk_or=%22%22; tk_r3d=%22%22; tk_lr=%22%22
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
last-modified: Mon, 03 Jan 2022 19:18:44 GMT
accept-ranges: bytes
content-length: 28810
content-type: image/jpeg
date: Thu, 23 Jun 2022 23:30:25 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=192, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=192], baseline, precision 8, 192x192, components 3\012- data
Size:   28810
Md5:    61d929a0e66c62b14f205ebd55a366b1
Sha1:   c4bdaa4f158a8548b2727980344f66a911837ed4
Sha256: 01405b6574ce4d64072461e44c19efed9c6f1ce48c81123e526704af9a3a7d9a
                                        
                                            POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 
Host: roccastel.com.br
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://roccastel.com.br
Connection: keep-alive
Referer: https://roccastel.com.br/ut-animi/documents.zip
Cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; _wordpress_lp_guest=f0f11963ed34596c6ce7aa55c4a3a4f9; tk_or=%22%22; tk_r3d=%22%22; tk_lr=%22%22
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.185.211.112
HTTP/2 200 OK
                                        
access-control-allow-origin: https://roccastel.com.br
access-control-allow-credentials: true
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-robots-tag: noindex
set-cookie: _learn_press_session_0078d2a888a10e7629df766809c0cc8d=05c890284d71a4d944f9f820d44d4846%7C%7C1656199823%7C%7C2214f32c4c589bc21e361781b35fdcb4; expires=Sat, 25-Jun-2022 23:30:23 GMT; Max-Age=172798; path=/; secure
vary: Accept-Encoding
content-encoding: gzip
content-length: 385
content-type: application/json; charset=UTF-8
date: Thu, 23 Jun 2022 23:30:25 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- HTML document, ASCII text, with very long lines (934), with no line terminators
Size:   385
Md5:    c3b225847c2848686d29efbc1c13fa09
Sha1:   578479f8fd723b2db756aecd245dfd1a5e5f2cb1
Sha256: 85a46ea6b9112db343a937bf96f17c41880c379ad7c64cd0e51a31a939d780f5