r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2d2e7649ce9e9ba6fc8b68aa89352e3c
0153d1d3d830a457043e16bb40d48a0b9ddef4b8
8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6805
Expires: Thu, 01 Dec 2022 08:43:51 GMT
Date: Thu, 01 Dec 2022 06:50:26 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash f3cf023c797da81728c0ac84c8759331
fa07c5e39e4b0741ea484101cccb2202acea9d9c
5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2910
Cache-Control: max-age=102563
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:26 GMT
Etag: "638730f7-1d7"
Expires: Fri, 02 Dec 2022 11:19:49 GMT
Last-Modified: Wed, 30 Nov 2022 10:31:19 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 06:19:45 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1841
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fce5679881bf302a8978a0b462f01a9
b699fe030ea13ac73813e655c42ed9b531925e2b
a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5315
Expires: Thu, 01 Dec 2022 08:19:01 GMT
Date: Thu, 01 Dec 2022 06:50:26 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 76Zq8CZISv9+XhmuDK9gye1omRdpwb3ka1rxvRy0MnM+CwJ+GK8kM1h6EO5aa5/v4WbrUIrzrg4=
x-amz-request-id: RX8WV2HKXDHRKVR0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 06:46:10 GMT
age: 256
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 06:50:26 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
zoommy.com.br/
301 Moved Permanently 162 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 01 Dec 2022 06:50:26 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://zoommy.com.br/
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 06:08:56 GMT
cache-control: public,max-age=3600
age: 2491
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cfdd00e67ee6ca21712b867eb5288ab6
b61d5d6ec3b7ad71619e13e32c87f2d01871b88a
f740cac6dfedc1bf0f82efb10dac4f6ffb22f9bb5d4a9b68a4cd971dd2f65793
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2898
Cache-Control: max-age=97482
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:27 GMT
Etag: "63871d2b-1d7"
Expires: Fri, 02 Dec 2022 09:55:09 GMT
Last-Modified: Wed, 30 Nov 2022 09:06:51 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 188c50963e7939b1f26a31dbcb8c8200
859416e6148ea6618584e53604efcf072bb989cc
3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zoommy.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 01 Dec 2022 06:41:08 GMT
expires: Thu, 01 Dec 2022 08:41:08 GMT
cache-control: public, max-age=7200
age: 559
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 188c50963e7939b1f26a31dbcb8c8200
859416e6148ea6618584e53604efcf072bb989cc
3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: xBT2kvBXZrtIi8h03wEiOA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0uE8aGcPtYAOL4OolOzQP+HGKw4=
zoommy.com.br/
200 OK 13 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text
Hash ebf31368aebe5fc1060e06c7628bb7a5
0eea38ffdea2eed6a3dba9e9834bdb9ee3602a18
634b2a374695420628ec94c5a64590bf3240e96616a5633366eb98d43209397a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 06:50:27 GMT
content-type: text/html
x-accel-version: 0.01
last-modified: Mon, 30 Mar 2020 23:22:55 GMT
etag: W/"382-5a21abb1912f1"
x-cache-status: STALE
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/css/bootstrap.css
200 OK 18 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/css/bootstrap.css
IP
File type assembler source, ASCII text, with very long lines (540), with CRLF line terminators
Hash 353c2b6a031886cd1cf7760abbc61095
d2715f5012e68b8cbe18ccaddcf6feccb042f6f4
fac8ad347669df9d9ef4534b40b705abd26db37e4cd800a82e6fdfc0e99a6000
GET /builder/elements/css/bootstrap.css HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: text/css
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:56 GMT
accept-ranges: bytes
etag: "0f85d4c8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 17604
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/Content/font-awesome.css
200 OK 7.4 kB URL HTTP/2 fotolembranca.zoommy.com.br/Content/font-awesome.css
IP
File type troff or preprocessor input, ASCII text, with very long lines (372), with CRLF line terminators
Hash c02dd13140ce11f9422c642ef4c87bdb
a2fc328e69aa333d8fc34f825f2951c2caf30721
851c0fd239185fe417f8e14e120f872640302056fe834a0882e6fde52a640ac4
GET /Content/font-awesome.css HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: text/css
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "808ef64c8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 7449
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/css/style.css
200 OK 13 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/css/style.css
IP
File type assembler source, ASCII text, with CRLF line terminators
Hash 8b7d45401ef1978e934b3097e185e7e4
b81f50317ba3c527caca8eec959e707c5bdabd7d
b5b32222ebdf645b71c812ebbfdb42c197a54c7512521f396dc2de379f60ef3c
GET /builder/elements/css/style.css HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: text/css
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:56 GMT
accept-ranges: bytes
etag: "6b3f34c8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 13412
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/css/magnific-popup.css
200 OK 2.5 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/css/magnific-popup.css
IP
File type ASCII text, with CRLF line terminators
Hash a7c6223fa34648d9b450f9ddb06a773d
d6a17aed8cf72e521815af7765363b5fa0871c52
0c6a946f983fb1b25fa89c0c5a0d7bab9e477741985d20db051d70a285b9c1ae
GET /builder/elements/css/magnific-popup.css HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: text/css
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:56 GMT
accept-ranges: bytes
etag: "fc84f34c8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 2451
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3519a58310eefa01756f0440e2acd7dd
50153382830684a6abb653dc7b4e41d7c7e386b5
5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fotolembranca.zoommy.com.br/builder/elements/css/iconfont-style.css
200 OK 3.3 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/css/iconfont-style.css
IP
File type ASCII text, with CRLF line terminators
Hash ed66742caa789faf858999de468dba1f
815a2463bc4ea1916a0666de38ab1665b3e86bff
a7730dc134dee3f348cdd31b04ae99b6cbb721a179c0e710f74f6283551eec2d
GET /builder/elements/css/iconfont-style.css HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: text/css
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:56 GMT
accept-ranges: bytes
etag: "226ef34c8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 3252
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-57354294-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-57354294-1
IP
File type ASCII text, with very long lines (1921)
Hash 14b5b90d84da1e22da10a23ab8d064bc
9fc4b6eeba0fbe576c510f3fd69080095b4ee8f5
6daf38b1db66c3c7272672ceb6ea0651b243eb12fc7b73fd96bd0b1c9bcb9a57
GET /gtag/js?id=UA-57354294-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 01 Dec 2022 06:50:28 GMT
expires: Thu, 01 Dec 2022 06:50:28 GMT
cache-control: private, max-age=900
last-modified: Thu, 01 Dec 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43548
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/css/popup.css
200 OK 826 B URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/css/popup.css
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash d151c554db8f93a040584352cd6a3675
4a1c594ea768015533e0526722d8d7dd15948d1b
97afa0970294b7491e87d60b1b0324a6a4dac425f9c0b9051f854dac507bdd8c
GET /builder/elements/css/popup.css HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: text/css
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:56 GMT
accept-ranges: bytes
etag: "0f85d4c8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 826
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/animations/animate.css
200 OK 8.1 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/animations/animate.css
IP
File type ASCII text, with CRLF line terminators
Hash b3b418740e2516f42ed6a83e1369753b
2361bff968a0871363748734bc6dd57d19e7d387
2784b08f6d6488bff44182a3e265170f351a0086c2660ca674fcfdc57e0c341c
GET /builder/elements/scripts/animations/animate.css HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: text/css
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "29a7264d8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 8085
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/respond.min.js
200 OK 2.2 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/respond.min.js
IP
File type HTML document, ASCII text, with very long lines (4453), with CRLF line terminators
Hash db3026138f8e2d87619f74400b93c39c
35a78bd2bcdc3353acb6b55ed5e658d494c8f8a5
8158df7b6ca794cb3f0a9f7592a16ac174a40a0a3b2cb40dd9206522ddb1f3cc
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/respond.min.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "808ef64c8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 2227
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/html5shiv.js
200 OK 1.6 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/html5shiv.js
IP
File type HTML document, ASCII text, with very long lines (645), with CRLF line terminators
Hash 9e7e532dfb442740ed7be68fa2c69fc4
e58cb86fe87d9fa3fb87bcac0f843abf1a69c19e
899a4b0d542690c05a45e0e0341b5dcdea7e9845de54fc7da6f35c2a8f56c47c
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/html5shiv.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "cd9274d8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 1574
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/jquery-1.11.2.min.js
200 OK 43 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/jquery-1.11.2.min.js
IP
File type ASCII text, with very long lines (32047), with CRLF line terminators
Hash 3c43c5046e45fb25bc837781dbbfcf96
3f3ca522be3a372807f85c74970f92aaceb41095
4d828a4a0c3c3f0c4a7d7352d54860735359f52de0ee458b4f87e4cc55731deb
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/jquery-1.11.2.min.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "e939274d8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 42830
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/bootstrap.min.js
200 OK 7.1 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/bootstrap.min.js
IP
File type ASCII text, with very long lines (25999), with CRLF line terminators
Hash 0b745027248460e4b1fb033f2e47918b
30a2af68b41364d7a3ef3c0a4db327ff75cd114d
2ac26baad0eaf1cb34e3d5135f0f7e1be6aaab300a022983779dc72d5673b402
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/bootstrap.min.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "808ef64c8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 7129
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/smoothscroll.js
200 OK 7.0 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/smoothscroll.js
IP
File type ASCII text, with CRLF line terminators
Hash 0511e979bcf48817404090fa6fc42b3a
51573d216d1aee90897e1cdf7b3f7f1dd1a45778
54b4c6c9807f2716418fba5cd4edbb82d01b5df909d59295ac0943e12aeaeecf
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/smoothscroll.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "808ef64c8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 6951
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/jquery.smooth-scroll.min.js
200 OK 1.3 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/jquery.smooth-scroll.min.js
IP
File type ASCII text, with very long lines (2772), with CRLF line terminators
Hash e3193470ad0b8623615e00dc2d85306c
e06140a9b9bcf075736e1cd15f0e70e8a5f170a2
452c814761bf7f4dfd1e32b28baae00ef6b0c3d84e0a4a530de947f53c08130e
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/jquery.smooth-scroll.min.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "808ef64c8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 1326
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/placeholders.jquery.min.js
200 OK 1.8 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/placeholders.jquery.min.js
IP
File type ASCII text, with very long lines (4610), with CRLF line terminators
Hash 4dbaa6f342cbd0313e12666ebe6a40ce
05ee066c89d51fd8f0d38f77046a66c19d33395e
fda96665e1ad894fb3e802c992bc77ff85e2b612ef78918590800aa69f827164
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/placeholders.jquery.min.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "808ef64c8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 1756
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/jquery.magnific-popup.min.js
200 OK 7.6 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/jquery.magnific-popup.min.js
IP
File type ASCII text, with very long lines (20818), with CRLF line terminators
Hash cf8fae33adbb05d7cc3a8368cfe92b91
4ff230694c4af866fe2fdf3be99dbefd62e58c6d
f6d8e01b05de02829459d9ddfad46690139b72cf8198ffafa69c542c46e0f709
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/jquery.magnific-popup.min.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "808ef64c8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 7618
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/jquery.counterup.min.js
200 OK 760 B URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/jquery.counterup.min.js
IP
File type ASCII text, with very long lines (917), with CRLF line terminators
Hash b5436c6aee66bec6982803309dfbef6d
73a7375793bf3b4915976b4b31ccb981791ac0f5
da7e5ffd7f9c6f620a7eba40b72392b2f433edc851b1774780a98d08bd274af3
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/jquery.counterup.min.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "4151274d8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 760
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/jquery.validate.min.js
200 OK 8.1 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/jquery.validate.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (1290), with CRLF line terminators
Hash 022b1cbf9bf2741740c03bb4ba8ec2a8
96003d886383aa38015703fd257bd9da51c23ae9
ce8c62ba7254963b6079e95640ca3498281837bf47a1b155810b8d2775f1f578
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/jquery.validate.min.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "9b9b274d8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 8135
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 6b466958a57afc2601159b3ca3a85675
113996e2118b0f04f941accc108da7110f4a83a7
cdcf1e3234b478dba539787c713f8442c3fc1e25eaef5628ce3cbf0fb04e6170
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2074
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:28 GMT
Etag: "6386ca2e-117"
Last-Modified: Thu, 01 Dec 2022 06:15:54 GMT
Server: ECS (amb/6B8E)
X-Cache: HIT
Content-Length: 278
fotolembranca.zoommy.com.br/builder/elements/scripts/waypoints.min.js
200 OK 3.1 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/waypoints.min.js
IP
File type ASCII text, with very long lines (7828), with CRLF line terminators
Hash 73d470e33984dea9bb9b2eab09a5ba62
66b1897458f3ec8e75838753cd66193d20faa50d
00f2e1af124e1fd7e698e81c6f5f0ba0d38cf1cfdc71b4ac889c05ae9cd8895b
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/waypoints.min.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "9f16284d8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 3146
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/bigvideo.js
200 OK 3.2 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/bigvideo.js
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash ad3faf99c4eaa606884a47ef7a3706fe
054a6e92c54bed921a6304a0f17300254c7b5be2
aadde46250c66685965f84dd82ef48dd8e1fc4e98a057890628ae20af58ef84a
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/bigvideo.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "808ef64c8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 3174
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/video.js
200 OK 22 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/video.js
IP
File type HTML document, ASCII text, with very long lines (1117), with CRLF line terminators
Hash fb1baf2cb02f5901a94f3c8d4ef58207
fea93cd8c937a9928569f7b2cf2b9cbf81f03117
913dab1bcb45bb057c306d343fb2234969bc46dd62a6880027e3b3464148e3df
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/video.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "f412284d8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 21698
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/animations/wow.min.js
200 OK 3.3 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/animations/wow.min.js
IP
File type ASCII text, with very long lines (8152), with CRLF line terminators
Hash 6673733728c659430ed9e02ce924f556
29768205f66b00456efdbd6d9f294f9d057a4b48
c3486ca29d9f9a4001dfd4af78e1d26590e983d75fee11c8f56ca3fca906f473
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/animations/wow.min.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "7c0264d8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 3281
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 6b466958a57afc2601159b3ca3a85675
113996e2118b0f04f941accc108da7110f4a83a7
cdcf1e3234b478dba539787c713f8442c3fc1e25eaef5628ce3cbf0fb04e6170
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2074
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:28 GMT
Last-Modified: Thu, 01 Dec 2022 06:15:54 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 278
fotolembranca.zoommy.com.br/builder/elements/scripts/jquery.jCounter-0.1.4.js
200 OK 4.4 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/jquery.jCounter-0.1.4.js
IP
File type ASCII text, with CRLF line terminators
Hash 6e2d34ab067a3d3f4ccc716c77d86764
e60db69458a57eb4dd00191254e470f0e4c5bd4d
9d54a902a85dd2663745eb494f05b705eec1fd7712d0aa66c0e68ee7738ff5f1
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/jquery.jCounter-0.1.4.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "d86a274d8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 4410
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/jquery.autogrow-textarea.js
200 OK 1.3 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/jquery.autogrow-textarea.js
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash ecbf881f9e7d0b74fcb9ac162bc2d161
5cbefebab2a02ebc5687861b478bc72859b2991c
d5d093e3ca1acc41c097df166eedcf0df697d9221c2e0203c1322b07c96a404a
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/jquery.autogrow-textarea.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "4151274d8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 1300
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/scripts/globalize/globalize.js
200 OK 17 kB URL HTTP/2 fotolembranca.zoommy.com.br/scripts/globalize/globalize.js
IP
File type ASCII text, with CRLF line terminators
Hash 18e5367183811066bb8fef18aa0d76a6
aa0d6088e223b250ff08cba8e9ff29749a94e357
2428243ed3a51743a0db5c862f6a8e1bfc8cc2d55881e8b1861db2528cfbad58
Analyzer Verdict Alert fortinet Phishing
GET /scripts/globalize/globalize.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:59 GMT
accept-ranges: bytes
etag: "b11b8a4e8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 17069
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 6b466958a57afc2601159b3ca3a85675
113996e2118b0f04f941accc108da7110f4a83a7
cdcf1e3234b478dba539787c713f8442c3fc1e25eaef5628ce3cbf0fb04e6170
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1355
Cache-Control: max-age=161095
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:28 GMT
Etag: "63881bb0-116"
Expires: Sat, 03 Dec 2022 03:35:23 GMT
Last-Modified: Thu, 01 Dec 2022 03:12:48 GMT
Server: ECS (amb/6B89)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 6b466958a57afc2601159b3ca3a85675
113996e2118b0f04f941accc108da7110f4a83a7
cdcf1e3234b478dba539787c713f8442c3fc1e25eaef5628ce3cbf0fb04e6170
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2493
Cache-Control: max-age=162233
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:28 GMT
Etag: "63881bb0-116"
Expires: Sat, 03 Dec 2022 03:54:21 GMT
Last-Modified: Thu, 01 Dec 2022 03:12:48 GMT
Server: ECS (amb/6B7D)
X-Cache: HIT
Content-Length: 278
fotolembranca.zoommy.com.br/scripts/globalize/cultures/globalize.culture.pt-BR.js
200 OK 1.2 kB URL HTTP/2 fotolembranca.zoommy.com.br/scripts/globalize/cultures/globalize.culture.pt-BR.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash c74a432205f42ce5ff9296d6692b7f8f
f7f92eac6502c988680315ba3ad743937f1e6159
227250da5093382837b28b2c011b832f7666764b86bb8f7ebd2139ae13f7759f
Analyzer Verdict Alert fortinet Phishing
GET /scripts/globalize/cultures/globalize.culture.pt-BR.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:59 GMT
accept-ranges: bytes
etag: "a41e844e8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 1159
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/custom.js
200 OK 2.2 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/custom.js
IP
File type ASCII text, with CRLF line terminators
Hash 8c49e213a3d7981ee9ea29351521c023
578bd9922c8a565b8e1ec42f081b32b6b7d1271b
95655d17b4f431c32600057aa34b29bfd2e20683894ae418626a5f6e98b4a508
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/custom.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "808ef64c8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 2215
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/builder/elements/scripts/popup.js
200 OK 2.9 kB URL HTTP/2 fotolembranca.zoommy.com.br/builder/elements/scripts/popup.js
IP
File type HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (2600), with CRLF line terminators
Hash 32f45493e9b183a0787d697dc9fa6eaa
a230b5858ca7aaff1301ff2b8fef2fc57041334d
e190877aad826dd93e944df359c555a86943b1dba098c1b1996b8b0af6e416e3
Analyzer Verdict Alert fortinet Phishing
GET /builder/elements/scripts/popup.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "808ef64c8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 2860
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/Content/carousel.v2.css
200 OK 1.3 kB URL HTTP/2 fotolembranca.zoommy.com.br/Content/carousel.v2.css
IP
File type ASCII text, with CRLF line terminators
Hash eb31430b5375a95981da0979c9cb18f6
a0ea5c1adaedac43e5985190ba27dbe3d79da64e
cb22c3224a3044562d8c1d964bf0832ef579073a6f59c2eac9d8ca84bf3702d1
GET /Content/carousel.v2.css HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:57 GMT
accept-ranges: bytes
etag: "9f82844d8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 1307
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/Contents/page-advertising?v=OIjdLiP3zDbbwyGzc4HCP78v7aQq62NmROEun6odIEE1
200 OK 954 B URL HTTP/2 fotolembranca.zoommy.com.br/Contents/page-advertising?v=OIjdLiP3zDbbwyGzc4HCP78v7aQq62NmROEun6odIEE1
IP
File type ASCII text, with very long lines (3114), with no line terminators
Hash 109cc50c7f7469599a5be2cb7a4fc3f3
18495c3d02840daea97d76535913722bb92265ee
b387bac53e48e6cdaad38ec7576c139d6e71083bcb39e93bfe248485caada8c2
GET /Contents/page-advertising?v=OIjdLiP3zDbbwyGzc4HCP78v7aQq62NmROEun6odIEE1 HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: text/css; charset=utf-8
content-encoding: gzip
expires: Fri, 01 Dec 2023 06:50:28 GMT
last-modified: Thu, 01 Dec 2022 06:50:28 GMT
vary: User-Agent,Accept-Encoding
server: Microsoft-IIS/10.0
access-control-max-age: 1728000
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 954
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/bundles/globalize?v=Z7dQo83eosj7yLn2TxGEoPKpiluP65U_S4JHNU9GjkM1
200 OK 9.6 kB URL HTTP/2 fotolembranca.zoommy.com.br/bundles/globalize?v=Z7dQo83eosj7yLn2TxGEoPKpiluP65U_S4JHNU9GjkM1
IP
File type Unicode text, UTF-8 text, with very long lines (22548), with no line terminators
Hash 9b684658a726e0a83c356ea383341cd8
6cbd5cf03bd967ff0c424f6d453dcc3361f4d315
367ff260bbd848a31cda11fcb844f4d4ddc1957f777b5421fb93e713f34d715e
Analyzer Verdict Alert fortinet Phishing
GET /bundles/globalize?v=Z7dQo83eosj7yLn2TxGEoPKpiluP65U_S4JHNU9GjkM1 HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: text/javascript; charset=utf-8
content-encoding: gzip
expires: Fri, 01 Dec 2023 06:50:28 GMT
last-modified: Thu, 01 Dec 2022 06:50:28 GMT
vary: User-Agent,Accept-Encoding
server: Microsoft-IIS/10.0
access-control-max-age: 1728000
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 9649
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 6b466958a57afc2601159b3ca3a85675
113996e2118b0f04f941accc108da7110f4a83a7
cdcf1e3234b478dba539787c713f8442c3fc1e25eaef5628ce3cbf0fb04e6170
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:28 GMT
Etag: "6386ca2e-117"
Server: ECS (amb/6BB4)
Content-Length: 278
fotolembranca.zoommy.com.br/bundles/page-views?v=RFS_9pcQpAX3kK36TH6nfMX6edR9IzqGFT5-MduLznc1
200 OK 355 B URL HTTP/2 fotolembranca.zoommy.com.br/bundles/page-views?v=RFS_9pcQpAX3kK36TH6nfMX6edR9IzqGFT5-MduLznc1
IP
File type ASCII text, with very long lines (357), with no line terminators
Hash b6984199ec0f51e93d7064a7be4bd6d2
304aeaaa4c574a8a71d60894fb04ea9671f47eeb
37669d38f2ef8020e68fd75094cb708b0432e1e645ed2606509251e1e4034ff0
Analyzer Verdict Alert fortinet Phishing
GET /bundles/page-views?v=RFS_9pcQpAX3kK36TH6nfMX6edR9IzqGFT5-MduLznc1 HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: text/javascript; charset=utf-8
content-encoding: gzip
expires: Fri, 01 Dec 2023 06:50:28 GMT
last-modified: Thu, 01 Dec 2022 06:50:28 GMT
vary: User-Agent,Accept-Encoding
server: Microsoft-IIS/10.0
access-control-max-age: 1728000
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 355
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3519a58310eefa01756f0440e2acd7dd
50153382830684a6abb653dc7b4e41d7c7e386b5
5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fotolembranca.zoommy.com.br/scripts/jquery.form.js
200 OK 12 kB URL HTTP/2 fotolembranca.zoommy.com.br/scripts/jquery.form.js
IP
File type ASCII text, with CRLF line terminators
Hash a98c60d4553918fbb1973e91a1c3a779
31303f1b3f3decd341ce80edd7270c2451308193
a94b02e4afafbefd46deaded722c8ffc0059153d7a54e1831d02212dd9144e5b
Analyzer Verdict Alert fortinet Phishing
GET /scripts/jquery.form.js HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 10 Aug 2022 22:26:59 GMT
accept-ranges: bytes
etag: "80bb274e8add81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 12255
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/bundles/page-capform?v=KNHAZZuHsaBypgrGEGz6ldaVigcr0IqAbNnKRPnF7Oo1
200 OK 2.5 kB URL HTTP/2 fotolembranca.zoommy.com.br/bundles/page-capform?v=KNHAZZuHsaBypgrGEGz6ldaVigcr0IqAbNnKRPnF7Oo1
IP
File type ASCII text, with very long lines (6651), with no line terminators
Hash 504f93230503310cd94c3e83fb707f0b
07dd2f4922d084bec2a2e133f1dc4e80c1c6408e
a50569d85eb2abc02ad391382d458d855c69332f4861208d9cfa4e3cf3c616af
Analyzer Verdict Alert fortinet Phishing
GET /bundles/page-capform?v=KNHAZZuHsaBypgrGEGz6ldaVigcr0IqAbNnKRPnF7Oo1 HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: text/javascript; charset=utf-8
content-encoding: gzip
expires: Fri, 01 Dec 2023 06:50:28 GMT
last-modified: Thu, 01 Dec 2022 06:50:28 GMT
vary: User-Agent,Accept-Encoding
server: Microsoft-IIS/10.0
access-control-max-age: 1728000
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:28 GMT
content-length: 2536
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 6b466958a57afc2601159b3ca3a85675
113996e2118b0f04f941accc108da7110f4a83a7
cdcf1e3234b478dba539787c713f8442c3fc1e25eaef5628ce3cbf0fb04e6170
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:28 GMT
Etag: "6386ca2e-117"
Last-Modified: Thu, 01 Dec 2022 06:50:28 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 278
blob.contato.io/machine-files/builder/navdropdown.js
200 OK 51 kB URL HTTP/2 blob.contato.io/machine-files/builder/navdropdown.js
IP
File type ASCII text, with CRLF line terminators
Hash e1feb2b7dd0950d63ba911e5c1ad783a
93d12e1386989a0ab483ab44742058b8c7517e17
edd35b0fcda242c4591108e220365dd84f20c9dfc30225a27ce2d2fdc392a34f
GET /machine-files/builder/navdropdown.js HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:28 GMT
content-type: application/javascript
content-md5: x4bwYb8liVm/Lv/38O5IOw==
last-modified: Fri, 08 Jun 2018 21:05:03 GMT
x-ms-request-id: 17d8b067-301e-005b-6f47-f5a1bc000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: HIT
age: 1234
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XoowzKnLoEcy7rZSdvpfcrvwyXSuzu5sldhNttAsFpmMzE5yD1zVVQ%2BzgPLxVkiTtKmgMt8NpYW1uCLZ0cPnU0g1dR47%2FLe0OvziUP%2FJMFgAfoMPLEEZDIULoe1N9zmjhLo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e3880ede0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/Builder/elements/css/fonts/iconfont.woff?-8vg322
200 OK 124 kB URL HTTP/2 fotolembranca.zoommy.com.br/Builder/elements/css/fonts/iconfont.woff?-8vg322
IP
File type Web Open Font Format, TrueType, length 123836, version 1.0\012- data
Size 124 kB (123836 bytes)
Hash 6d4c214764a8a3dc7f0c8feab1e02cdf
29b95407732a7a301f1a8621b077f91d3596a914
0e5674c8f5ae96cf47bc2461875ad2bdd5043402252a9276e761664d192140fc
GET /Builder/elements/css/fonts/iconfont.woff?-8vg322 HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/builder/elements/css/iconfont-style.css
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: font/x-woff
last-modified: Wed, 10 Aug 2022 22:26:56 GMT
accept-ranges: bytes
etag: "8f57f34c8add81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:29 GMT
content-length: 123836
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfMJaERySjQ.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfMJaERySjQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash 56815b67806b56493202b27cfd9f42c0
977eae4a3b34d8e39a5cb6a58a10ab2deba30d61
5e347565595b94716cf6f9fa7adfed6a5646bae6a163d35a20f73c067f48ad93
GET /s/hind/v16/5aU19_a8oxmIfMJaERySjQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fotolembranca.zoommy.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 15:50:09 GMT
expires: Wed, 29 Nov 2023 15:50:09 GMT
cache-control: public, max-age=31536000
age: 140419
last-modified: Tue, 26 Apr 2022 15:54:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15764, version 1.0\012- data
Hash 603b8950590bf833546eee7cbc79944a
ebbde06eb829868c5f689afe2d48377608be1e7b
0f303f31706d39866cced9dcc17b61fb8423674278d7f6051d66b3a79ffbca18
GET /s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fotolembranca.zoommy.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:56:56 GMT
expires: Thu, 30 Nov 2023 19:56:56 GMT
cache-control: public, max-age=31536000
age: 39212
last-modified: Wed, 11 May 2022 19:24:35 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fotolembranca.zoommy.com.br/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 fotolembranca.zoommy.com.br/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: fotolembranca.zoommy.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/Content/font-awesome.css
Cookie: _ga=GA1.3.2054078809.1669877426; _gid=GA1.3.957433205.1669877426; _gat=1; ASP.NET_SessionId=rqnlb4b1bt0ef0y0pumude2i
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff2
last-modified: Wed, 10 Aug 2022 22:27:01 GMT
accept-ranges: bytes
etag: "3545824f8add81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
date: Thu, 01 Dec 2022 06:50:29 GMT
content-length: 77160
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fotolembranca.zoommy.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 40573
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfLZcERySjQ.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfLZcERySjQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16612, version 1.0\012- data
Hash e9224cf8a465a5349decdad3fd1412eb
53503e38c6c13a2d0cb2189ec56527b5340e3673
078751117ee4d17e09b4d4ac5d9f7358bc4487cb94561df738c6ee000eeffb4d
GET /s/hind/v16/5aU19_a8oxmIfLZcERySjQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fotolembranca.zoommy.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16612
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 15:46:14 GMT
expires: Wed, 29 Nov 2023 15:46:14 GMT
cache-control: public, max-age=31536000
age: 140654
last-modified: Tue, 26 Apr 2022 15:46:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fotolembranca.zoommy.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 40573
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
blob.contato.io/machine-user-images/LOGO_ZOOMMY_150-img-2490628-20200326234254.png
200 OK 11 kB URL HTTP/2 blob.contato.io/machine-user-images/LOGO_ZOOMMY_150-img-2490628-20200326234254.png
IP
File type PNG image data, 150 x 66, 8-bit/color RGBA, non-interlaced\012- data
Hash 36daa5c246a839117374efab9bed2f5d
f363fa4af063bfd195443adbaeea281609255b9e
0c7ebdbcaa1530fce680c413d107a0d6a4bd90ec347943f05357b84314063467
GET /machine-user-images/LOGO_ZOOMMY_150-img-2490628-20200326234254.png HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:28 GMT
content-type: application/octet-stream
content-length: 10949
content-md5: NtqlwkaoORFzdO+rm+0vXQ==
last-modified: Fri, 27 Mar 2020 02:42:54 GMT
etag: 0x8D7D1F88D1166F1
x-ms-request-id: 1600363d-101e-0047-1151-0579ab000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=stm8MQIMyF8%2FOXjxqDLqDf6LzDZvQvjHImG5TYsYmvhhfDyIvB6wXLasy4T5N48Y1g6eswhdDxlLYk%2FTAsmtN45bShjV71ULArn4ucfT%2F%2FOj0o8AM3QuUTe1L9pM28pdgqQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387aea30b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-user-images/img-55398-20160829144846.PNG
200 OK 2.1 kB URL HTTP/2 blob.contato.io/machine-user-images/img-55398-20160829144846.PNG
IP
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 30693d068681e05fcdc9d204880c556a
c07a582fc49045ab03828f74a2f8784020ed8def
0e3bcb8c87ee71788dae277cbf0f5f55307e6f283eb84bf343f00a9f0669877b
GET /machine-user-images/img-55398-20160829144846.PNG HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:28 GMT
content-type: application/octet-stream
content-length: 2086
content-md5: MGk9BoaB4F/NydIEiAxVag==
last-modified: Mon, 29 Aug 2016 17:49:48 GMT
etag: 0x8D3D034DEA75338
x-ms-request-id: b97fd60c-501e-004b-2851-05975a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6el%2BkB0HcgzrJR8XK4teQLyzGQSLCOrJF87ee80K%2BapvNgNSsYNFk13q5VhDq2pXU89Oc1f7Peo9h0yThdCysmxZKYZe0IAsExicbNLkkEgx4cTWtr8FR6bIHA5xQmPUfw0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387ae930b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-files/builder/pop-exit.js
200 OK 9.0 kB URL HTTP/2 blob.contato.io/machine-files/builder/pop-exit.js
IP
File type ASCII text, with very long lines (1475), with CRLF line terminators
Hash 318ec3b3e160df1e7ad49b01aa479afe
ced623a7f1b766d13e9a44beb09dea1611639d93
fe0de71e130357861c5ee6a42f2f117c7bbe6cb01ed7300782599fdfd42c9cb0
GET /machine-files/builder/pop-exit.js HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:28 GMT
content-type: application/javascript
content-md5: DLU2tqrmTJQ4yPRZNaLG1w==
last-modified: Wed, 08 Mar 2017 14:39:26 GMT
x-ms-request-id: 2125eb8d-001e-0053-34a8-01bacf000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2uDTEAbJmyv%2BZvMIZDcNQu%2BJxONi6E8%2BBu%2Fa2SIGG8b2siNx9WLlv9oUBb8rpYRXW%2BIlREcDdQe4p4qyWs4rIGWpTKBoQprEM%2BlZ6Y%2FGZ6XHTsUkjaYxWwENhFfExOeTP5Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e3880edb0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11189
Expires: Thu, 01 Dec 2022 09:56:58 GMT
Date: Thu, 01 Dec 2022 06:50:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11189
Expires: Thu, 01 Dec 2022 09:56:58 GMT
Date: Thu, 01 Dec 2022 06:50:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11189
Expires: Thu, 01 Dec 2022 09:56:58 GMT
Date: Thu, 01 Dec 2022 06:50:29 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f924fdd-ce65-4f00-8153-3caef7c54e22.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f924fdd-ce65-4f00-8153-3caef7c54e22.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eb4b8985f697c1ff7753d3961fb4f67d
b412d62d44993500b947a38e8e242d0c6d6b7588
571c1543cd99b08e62438146f383bf48a9172ae377b4c17dbc6c8c58bdbb5803
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f924fdd-ce65-4f00-8153-3caef7c54e22.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5295
x-amzn-requestid: e9c096df-2dba-408c-b45a-d114755fa883
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbzM0HmuoAMF4Ww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cbeb-5808a0756f4180a0613cdbcd;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:32:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lUjE1-vViTaS5s23OSlhLlxC597y0etgzMYGUdlqdpHBTK_ww5DEYA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:49:20 GMT
age: 32469
etag: "b412d62d44993500b947a38e8e242d0c6d6b7588"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26d6dffbf400da4803a2e76e2a8ef2f8
2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8
04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8740
x-amzn-requestid: 4823cf63-98eb-40d3-bb8b-e09cd2262f36
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7SqHjYIAMF8xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830c10-316b213c33ce9bc2355c0900;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tK4wl-g5kcUhVFE3iZGILhZhZSsaMzQD9JTBHj1JXV95yXs_e3gMGw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 13:21:34 GMT
age: 62935
etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb53953-3f6b-43ee-95d9-fb65d133745f.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb53953-3f6b-43ee-95d9-fb65d133745f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 328ce221bcf3442f88d09373193ff594
63bfa2ea925aa2c188c664a7bf7af7b0e5417e60
21d5b5ec267430dba91b17f89a557aca5cd2a21535da18eb02ec69ed0e1b7371
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb53953-3f6b-43ee-95d9-fb65d133745f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13411
x-amzn-requestid: 17fcc4e1-76c1-4eca-9235-c1a513bca24a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbz80FCQoAMFs1A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cd1e-26da4f265d74215f31425eb9;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:37:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MttRByNp1C1ZeFFicFVa0w3XRyXJnUycPy2Izk8hzGEgXGdDqD3L3A==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:48:17 GMT
age: 32532
etag: "63bfa2ea925aa2c188c664a7bf7af7b0e5417e60"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
blob.contato.io/machine-files/builder/allpages.builder.css
200 OK 21 kB URL HTTP/2 blob.contato.io/machine-files/builder/allpages.builder.css
IP
File type Unicode text, UTF-8 text, with very long lines (368), with CRLF line terminators
Hash 65a4220fc77e46583a63cd91d0d6c462
5b2be70da9508e1d14783972ebe998198426d591
5a4faf08d9abfd3c6c871a84da03014a9bb5820c5d879e2f92c951ca7d393dfd
GET /machine-files/builder/allpages.builder.css HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:28 GMT
content-type: text/css
content-md5: XyTqW8HhCCJvbF7ufs+/zA==
last-modified: Thu, 11 Feb 2021 22:04:34 GMT
x-ms-request-id: cc558c5d-601e-0043-49e0-a48c29000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: HIT
age: 1234
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j5oOedxZGTIvBdlbkhgNBKNrexoD8oijUMlCyzCcBQQzM5QymQ6VvOVFpFP%2FuNu1lWGBwgnUF4emrIFUtM6aAQ3AYyJ1YZ9rPCDUnCF4c3OYvPyVsXQD4RVXkrzJA3co5uY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e3880edf0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F454095ab-a1f1-4a4f-bb9e-68ca835c0b19.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F454095ab-a1f1-4a4f-bb9e-68ca835c0b19.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f8fd0816eb402409135c039ae8366346
8a2adf9f19759d833bc4bc16d52de6c59fba355b
a398e0653664609674795d6310ec79310edbe30c216dc3c54f28f9d6442dfccc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F454095ab-a1f1-4a4f-bb9e-68ca835c0b19.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7446
x-amzn-requestid: 4e1e09be-e182-47b9-ada5-6b4774f291c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cc5drFUroAMFjsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63883c57-046a05ce234dd47e20b1e7b9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 05:32:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8jEMlOF2_Ic-HWF_JGNnodcddUcIBTlD0_7-EbX4NUMxYt6YBAcv-w==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 05:33:59 GMT
age: 4590
etag: "8a2adf9f19759d833bc4bc16d52de6c59fba355b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
blob.contato.io/machine-files/builder/menudrop.css
200 OK 13 kB URL HTTP/2 blob.contato.io/machine-files/builder/menudrop.css
IP
File type ASCII text, with CRLF line terminators
Hash 9b82fe6b66c5a1c97c0ca56d11cf8ade
988139fd3e85ca909a30c50777b8b7a5c2bcbe57
0ab931365c6897c2843526f5c92ec3f3bf2e6f86b1063b89bf1fb9e6e2a9e6aa
GET /machine-files/builder/menudrop.css HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:28 GMT
content-type: text/css
content-md5: JJNpfDzxKNCYrtCEEquVxA==
last-modified: Mon, 06 Mar 2017 18:37:13 GMT
x-ms-request-id: d63870bd-301e-003d-79a6-a413e6000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: HIT
age: 1234
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D8EsykZUhaMes62k6sydjf%2ByvNRu4gz2LLjPSva2Bh%2BtlBoJl3DZeDHAWft6o%2Bfbdi9oR9QEwoWwjUaynIGJ5Sa%2BNNye6bC8lsXkAdZ2NX3HDDcQf4VTwsbGFhlJwm2mXFc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387ae920b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-user-images/5-img-2490628-20200329133121.jpg
200 OK 111 kB URL HTTP/2 blob.contato.io/machine-user-images/5-img-2490628-20200329133121.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=400, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=400], progressive, precision 8, 400x400, components 3\012- data
Size 111 kB (111058 bytes)
Hash b35e6cbc6289fc5a0504b6d062374b74
6925c5e209f6aee630988ee935695a0e56a6ba6f
48345ddb185d944c16ed3c291dadaf9b03a52589a147652f017d7af46b5cda54
GET /machine-user-images/5-img-2490628-20200329133121.jpg HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:29 GMT
content-type: application/octet-stream
content-length: 111058
content-md5: s15svGKJ/FoFBLbQYjdLdA==
last-modified: Sun, 29 Mar 2020 16:31:21 GMT
etag: 0x8D7D3FE9DB25456
x-ms-request-id: acef1eed-401e-001b-4451-058852000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yKrWeES0dP452US70ib59CQoDUYQjkhK3ezGLUPkMp7C8sb9RmSiRY8UIj0avusE8miOQTDEgb8R%2FqSD8n1w0TBMSHcwLW0bPFPiJFlbhADGqDNs3ApSoOEgq5xC%2BWwyzY8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387ae9f0b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-user-images/4-img-2490628-20200329132440.jpg
200 OK 98 kB URL HTTP/2 blob.contato.io/machine-user-images/4-img-2490628-20200329132440.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=400, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=400], progressive, precision 8, 400x400, components 3\012- data
Hash 1f3784c1c96a1764aa68bce292a80015
120e5596acc1e1bd2cc9c6021d481f312458b563
166eaa60853f714759f0c20a3463e13f33dc884799065e2922e3e449ac46c79d
GET /machine-user-images/4-img-2490628-20200329132440.jpg HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:29 GMT
content-type: application/octet-stream
content-length: 98378
content-md5: HzeEwclqF2SqaLzikqgAFQ==
last-modified: Sun, 29 Mar 2020 16:24:40 GMT
etag: 0x8D7D3FDAECBB3F4
x-ms-request-id: 7dea8df5-101e-0021-4f51-05cbf1000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TSb7tn22J%2BE6m10toTgpmczZG9z9lU%2B8Tv2uwUPnbQXgRlsCmfun%2B0EIBoaj1MGtFvPoYRX3I62ziMeI7zl3LiFAfmeP%2BeqybBAM3%2BSji3YtWiFd91dTMfANSxZW1CGTRlI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387aea00b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-user-images/1-img-2490628-20200329125334.jpg
200 OK 175 kB URL HTTP/2 blob.contato.io/machine-user-images/1-img-2490628-20200329125334.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=400, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=400], progressive, precision 8, 400x400, components 3\012- data
Size 175 kB (174832 bytes)
Hash 5a63e93e8a9c5a8398fa0825b54e0a91
ecec5a1dcbc6cae8a57892f1dee7cd76e9f2cee9
f32f960f1cf0d49710a15fe5d236c255077f5fa1cfd591fc259bfebed833b318
GET /machine-user-images/1-img-2490628-20200329125334.jpg HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:29 GMT
content-type: application/octet-stream
content-length: 174832
content-md5: WmPpPoqcWoOY+ggltU4KkQ==
last-modified: Sun, 29 Mar 2020 15:53:34 GMT
etag: 0x8D7D3F95647C357
x-ms-request-id: 0e3c449c-901e-005d-2751-0556c4000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ocnyqZhaNMyKyaabujMjzZUtzsxDMx8m%2FeTcxEHnfEARdJM3nTV6VVEw%2BFvsEhoscnM7cDaOY8L7qv1bZ%2B0kjHJ5tBdXBfmrK%2BgIuCGqkwp7zd2A5LtIZKj6%2FrxS9V9%2Bloo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387ae9c0b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-user-images/3-img-2490628-20200329131307.jpg
200 OK 161 kB URL HTTP/2 blob.contato.io/machine-user-images/3-img-2490628-20200329131307.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=400, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=400], progressive, precision 8, 400x400, components 3\012- data
Size 161 kB (160746 bytes)
Hash 1155b9a37b088c7726ca9d1ba1b643b2
090fe87f20ad91ac5d3d843919d9394da4262d3e
d358dfe6304634315bc3999d2187b2f2a33b038323fc0f67cc49414ea566bf64
GET /machine-user-images/3-img-2490628-20200329131307.jpg HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:29 GMT
content-type: application/octet-stream
content-length: 160746
content-md5: EVW5o3sIjHcmyp0bobZDsg==
last-modified: Sun, 29 Mar 2020 16:13:08 GMT
etag: 0x8D7D3FC120EB459
x-ms-request-id: 76186f0c-301e-001f-0251-057dd0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rT2Q3Gm%2FfZclTEz0r3J%2FD32SxMp6porPUk%2FsES6kAwtPQ9SDDuD01JkUbih8NvIskE03YI0gfFGxvTlIAC8sMkI4rm57q%2FWAfpCJ5BDC69hxIEZQ5zKEPRDun1HR%2F0xo3P4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387ae9e0b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-user-images/2-img-2490628-20200329130857.jpg
200 OK 159 kB URL HTTP/2 blob.contato.io/machine-user-images/2-img-2490628-20200329130857.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=400, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=400], progressive, precision 8, 400x400, components 3\012- data
Size 159 kB (159217 bytes)
Hash 05bdd250dffa02d7d0fdcb22e7fc4289
04afb3b1a368bb147934360d4511a0b07a7c609d
eb3d7d0bf89c86840ac2619641f239a96ecc228a738d2002e54da417055795f0
GET /machine-user-images/2-img-2490628-20200329130857.jpg HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:29 GMT
content-type: application/octet-stream
content-length: 159217
content-md5: Bb3SUN/6AtfQ/csi5/xCiQ==
last-modified: Sun, 29 Mar 2020 16:08:58 GMT
etag: 0x8D7D3FB7D3CF2B9
x-ms-request-id: 24077ae1-501e-002d-3e51-052500000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=06BXHrJPvhnbfrNQRKv3pB1tsp4ugb5oiRtv%2BnacMAZa2Rydjkxi6H8peCqeQ80GdW8uIkprpkIOySMNpAC%2Bn9nfzrk9QB%2B8MzzgwkyyWbxXEHRQLCsDv8Liwz1JyNWjDPA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387ae9d0b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-user-images/6-img-2490628-20200329133051.jpg
200 OK 142 kB URL HTTP/2 blob.contato.io/machine-user-images/6-img-2490628-20200329133051.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=400, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=400], progressive, precision 8, 400x400, components 3\012- data
Size 142 kB (141910 bytes)
Hash 5a16f3bdeb2fb79cdc42f0a615e5ab9e
5bf77e7f2696635655af9c38dbe63c45a2ee1f96
bb4b5850d341859a95b404e2e49faa790251962c5eb948ff20648ccbb7a8f85b
GET /machine-user-images/6-img-2490628-20200329133051.jpg HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:29 GMT
content-type: application/octet-stream
content-length: 141910
content-md5: Whbzvesvt5zcQvCmFeWrng==
last-modified: Sun, 29 Mar 2020 16:30:51 GMT
etag: 0x8D7D3FE8BE3961A
x-ms-request-id: 84e5df47-e01e-001d-1151-057f2a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ep82YSglz80geWZtQAOagENY9RaOyMQ0DpyDHHB3G3YcjFapcqB0VDOBaH9M%2BrnDO9mhn2vKvIKZaNMOcrJyV1QDy2OuV8Fr%2BBwFZvQzO%2F9%2B8WEC8XQgcHucdhoYt78n3xo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387aea10b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-user-images/CASAMENTOS-img-2490628-20200329013456.jpg
200 OK 580 kB URL HTTP/2 blob.contato.io/machine-user-images/CASAMENTOS-img-2490628-20200329013456.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=800, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], progressive, precision 8, 1200x800, components 3\012- data
Size 580 kB (580047 bytes)
Hash 136125be48834a13c1048712d4d72f9b
75063cc29b38c788095883406b6600331b317792
5e2cb6a85563ac41c12c1e4bfb83f945ff65ddca6e83bca80854960b05b21e30
GET /machine-user-images/CASAMENTOS-img-2490628-20200329013456.jpg HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:29 GMT
content-type: application/octet-stream
content-length: 580047
content-md5: E2ElvkiDShPBBIcS1Ncvmw==
last-modified: Sun, 29 Mar 2020 04:34:57 GMT
etag: 0x8D7D39A890EC6EC
x-ms-request-id: ff5259c2-c01e-0001-2251-05a73d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QdhcXzsdpwtVgc406bLWxTCwg6wQRs3SWLexdSTP1l8ArCemngr2LC1SaMQ9vQTjvZdG4M1zSe0635wxsHNOKfPKqOOhuRhoUCWPPehJlg%2BdDjSfqi3O4rcdHYiiBUqLvAs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387ae950b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-user-images/OUTROS-img-2490628-20200329123709.jpg
200 OK 656 kB URL HTTP/2 blob.contato.io/machine-user-images/OUTROS-img-2490628-20200329123709.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=800, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], progressive, precision 8, 1200x800, components 3\012- data
Size 656 kB (656148 bytes)
Hash 2bcc6d21a5f0f2b933ac81f69cc0bff1
c4ae067d68307a85391cf509353ea1347f1e4d5e
8e90bf08715f3f56d56da0d065892dca5eb07e7b591262571272545677254171
GET /machine-user-images/OUTROS-img-2490628-20200329123709.jpg HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:29 GMT
content-type: application/octet-stream
content-length: 656148
content-md5: K8xtIaXw8rkzrIH2nMC/8Q==
last-modified: Sun, 29 Mar 2020 15:37:09 GMT
etag: 0x8D7D3F70B83A1D8
x-ms-request-id: 8e1f053b-601e-0048-0451-05945d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TM7U7bILock%2F4VmJb%2Fl2lyn5WEEO1BMkoJyoExbBl4ss1S7UZpbtsLj1v8rUUb1VHnZxuKKXBi5He1dUnsoZDA6SPZWa19XsoL1SJOdTaBtELL03i79RQ2ygMJa0htOBfAw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387ae9b0b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-user-images/FORMATURA-img-2490628-20200329122719.jpg
200 OK 594 kB URL HTTP/2 blob.contato.io/machine-user-images/FORMATURA-img-2490628-20200329122719.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=800, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], progressive, precision 8, 1200x800, components 3\012- data
Size 594 kB (594151 bytes)
Hash a7e63e2ad7662997c31b8a5d3cb04bdc
72020eac30edde043f0d372f540e2b5dc4b359f1
986ef650f9d77985a9ab500f51a8afc6506142b1cc8db3ca4481ef44a8ff3327
GET /machine-user-images/FORMATURA-img-2490628-20200329122719.jpg HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:29 GMT
content-type: application/octet-stream
content-length: 594151
content-md5: p+Y+KtdmKZfDG4pdPLBL3A==
last-modified: Sun, 29 Mar 2020 15:27:20 GMT
etag: 0x8D7D3F5AC342ABD
x-ms-request-id: 631421ff-601e-0043-1051-058c29000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XzmjFqAroMiY330T9yHHQ%2FMSh70qzHTkHKK4dAy7e3JozPJ5I43GSmsl4CmUKzXRDx9G50HTZcQGAlec7ZUptylxLm0lNxZ2jV6x37%2FIUY8Z0%2Bd4EeX2w0aUcl9VdqgeMnA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387ae9a0b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-user-images/15_ANOS-img-2490628-20200329123510.jpg
200 OK 637 kB URL HTTP/2 blob.contato.io/machine-user-images/15_ANOS-img-2490628-20200329123510.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=800, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], progressive, precision 8, 1200x800, components 3\012- data
Size 637 kB (636659 bytes)
Hash f7ce8458484c7a8efbfae567ce73b766
e1e1ab6aa20c83c40176099d9871aec003681f6e
a524a546537ada4cf6f25dabe3641e80c5f95383f784318e95ec1a1cc2db9e8f
GET /machine-user-images/15_ANOS-img-2490628-20200329123510.jpg HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:29 GMT
content-type: application/octet-stream
content-length: 636659
content-md5: 986EWEhMeo77+uVnznO3Zg==
last-modified: Sun, 29 Mar 2020 15:35:11 GMT
etag: 0x8D7D3F6C4C5435C
x-ms-request-id: 6f631bfa-a01e-0033-0a51-05ffed000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5XjxLcudVyeNcFgQm5hlBrG%2FEq55U2diAGwAy6B4aJw%2FPecjDZe%2FY2azfygb1Yy7HUKlf58wEaN7RmrM2Y%2Brq3qqKAYawAjDimhfZbgxPJl7qH5H6xn1mRWHfB%2Fh3cj6bE4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387ae970b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-user-images/INFANTIL-img-2490628-20200329122639.jpg
200 OK 692 kB URL HTTP/2 blob.contato.io/machine-user-images/INFANTIL-img-2490628-20200329122639.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=800, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], progressive, precision 8, 1200x800, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 21573-22612, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 1186825144474799235106078720.000000, slope 867865519456256.000000\012- data
Size 692 kB (691570 bytes)
Hash f411c9e78ce98db0d7b391332353f31e
b53faffb9ca0ae78706666b3a6377966a5e321f0
cf8d9e8a0fc7dde355aa226158acd8834836d49b4b9c6e5e7628de39ff338b68
GET /machine-user-images/INFANTIL-img-2490628-20200329122639.jpg HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:29 GMT
content-type: application/octet-stream
content-length: 691570
content-md5: 9BHJ54zpjbDXs5EzI1PzHg==
last-modified: Sun, 29 Mar 2020 15:26:40 GMT
etag: 0x8D7D3F5945FF510
x-ms-request-id: 49594a4b-d01e-0015-5851-056459000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mmrQPnWJiRnpsvX%2Bz%2BNWuBg3zxZqU5IxwkjClw2d2CiZSNFIMGejzY9hGfHDLBvL5BZUJYB0XhTgPqZtRmszPzeBfACKzcK2TyF3FCEzh0RXddQQFHvitcfa416va2ghx%2Fg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387ae980b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-user-images/CORPORATIVO-img-2490628-20200329122233.jpg
200 OK 687 kB URL HTTP/2 blob.contato.io/machine-user-images/CORPORATIVO-img-2490628-20200329122233.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=800, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], progressive, precision 8, 1200x800, components 3\012- data
Size 687 kB (686695 bytes)
Hash 4fa767c9aa63edee72969ed44a8bc95b
113079cf8a93ee63f1bb5c7bd8d864d6c471fcec
d9614311337c86408a2810d414d9087e23cae825666933cb2da2a4dafdc90167
GET /machine-user-images/CORPORATIVO-img-2490628-20200329122233.jpg HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:29 GMT
content-type: application/octet-stream
content-length: 686695
content-md5: T6dnyapj7e5ylp7USovJWw==
last-modified: Sun, 29 Mar 2020 15:22:34 GMT
etag: 0x8D7D3F501646DAD
x-ms-request-id: 821c9704-c01e-0028-5351-05d17f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5jkGVZ76ArraCgw5gJFxWl1muWXtZ0EweKidpMQz2WmGv7b62BsOpqrH50VdxYZJxCdlMp6v1LlsJ0Grc7IJ9LMFKQ1DD7Jpd8YS5qpxmBh8rV1FO2eOJi1%2Bn2UI2xSuLkI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387ae990b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1601a7c8a96ebe5b2af6fe1abcb6b90b
fb19f5121052f37c9cef4640791964583618560c
893364204eb010f01c891762b80db20df137be75ecb85fa4e22dbc68143b53fb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1682
Cache-Control: max-age=134448
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:31 GMT
Etag: "6387b255-1d7"
Expires: Fri, 02 Dec 2022 20:11:19 GMT
Last-Modified: Wed, 30 Nov 2022 19:43:17 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
fonts.googleapis.com/css?family=Hind:600,300|Roboto:500,100,300|Abril+Fatface|Open+Sans:400,700,800|Montserrat:400,700|Droid+Sans:400,700|Arvo:400,700|Cabin:400,700|Patua+One|Raleway:400,700|Lobster|Josefin+Sans:400,700|Poppins:400,700|Montserrat+Alternates:400,700
200 OK 29 kB URL HTTP/2 fonts.googleapis.com/css?family=Hind:600,300|Roboto:500,100,300|Abril+Fatface|Open+Sans:400,700,800|Montserrat:400,700|Droid+Sans:400,700|Arvo:400,700|Cabin:400,700|Patua+One|Raleway:400,700|Lobster|Josefin+Sans:400,700|Poppins:400,700|Montserrat+Alternates:400,700
IP
File type ASCII text, with very long lines (28004)
Hash 40f621c3f71269913c49f67ca9c63565
2b9519310301b171e0869e98ace51fc965b0bc21
e684ce9191bc60a8c3891772ef81a531be52f820d4385ada81eb8ad9f948bf12
GET /css?family=Hind:600,300|Roboto:500,100,300|Abril+Fatface|Open+Sans:400,700,800|Montserrat:400,700|Droid+Sans:400,700|Arvo:400,700|Cabin:400,700|Patua+One|Raleway:400,700|Lobster|Josefin+Sans:400,700|Poppins:400,700|Montserrat+Alternates:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 01 Dec 2022 06:50:28 GMT
date: Thu, 01 Dec 2022 06:50:28 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1601a7c8a96ebe5b2af6fe1abcb6b90b
fb19f5121052f37c9cef4640791964583618560c
893364204eb010f01c891762b80db20df137be75ecb85fa4e22dbc68143b53fb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1682
Cache-Control: max-age=134448
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 06:50:31 GMT
Etag: "6387b255-1d7"
Expires: Fri, 02 Dec 2022 20:11:19 GMT
Last-Modified: Wed, 30 Nov 2022 19:43:17 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
blob.contato.io/machine-user-images/EQUIPAMENTOS-img-2490628-20200328130436.jpg
200 OK 3.3 MB URL HTTP/2 blob.contato.io/machine-user-images/EQUIPAMENTOS-img-2490628-20200328130436.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2020:03:28 13:04:01], baseline, precision 8, 3795x3383, components 3\012- data
Size 3.3 MB (3271560 bytes)
Hash 485c8e5180e8cd575a10c1567552976a
e87a5ee84636bfb8adc9b53fa99d1cce2b7f8ad6
d89aa9b626d646d58984b9ce5ce06e0ca3ca3ab2e5e7db9436204c1d2a6f6b40
GET /machine-user-images/EQUIPAMENTOS-img-2490628-20200328130436.jpg HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:29 GMT
content-type: application/octet-stream
content-length: 3271560
content-md5: SFyOUYDozVdaEMFWdVKXag==
last-modified: Sat, 28 Mar 2020 16:04:37 GMT
etag: 0x8D7D331B71660A7
x-ms-request-id: 98d880b4-401e-005f-0851-05543e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hf4Qlj1TaWe5ipAemFSvmNJKLRPAZUQu4OWJemzjQWtcZpwbGf5jb2WEbInZLahAWjpF6pCQNLz6vAnFfnaSw3cK6XKuRRMIssP60mUx%2BU3aK8N8TMq65KCnXH%2F3XD9n9so%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387ae940b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-files/amodels/webflow.js
200 OK 1.2 MB URL HTTP/2 blob.contato.io/machine-files/amodels/webflow.js
IP
File type Unicode text, UTF-8 text, with very long lines (28765)
Size 1.2 MB (1170507 bytes)
Hash b945d8ef2258b6a8827ef033b23ff4b3
e5964bad39614af20f46e377299ea4813ff36d82
894bf245710a0e6d6183cf270ac24ce2340884bb8b0bbf3f56a03af12291bfdf
GET /machine-files/amodels/webflow.js HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:28 GMT
content-type: application/javascript
content-md5: 8ojJQjWogAVDId5h3RqYTw==
last-modified: Tue, 11 Dec 2018 19:34:04 GMT
x-ms-request-id: 8d11419b-101e-004c-25fb-7961df000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
cache-control: max-age=1800
cf-cache-status: HIT
age: 1234
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FSB4lPUdGnqx%2Fed4i49B2by1EJWG4BovvZs4CmvuWDQiWF1O%2BgnzZ8cqOn2UbS50HpZnolhNwh8Ncp1VrbojNSMlgxcT6C6L%2Flrtr43BA5gXQrcBbZZO%2FfZo%2FJNf%2BxGOfJw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e3880edd0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=212787963132270&ev=PageView&dl=https%3A%2F%2Ffotolembranca.zoommy.com.br%2F&rl=&if=false&ts=1669877430236&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.2.1669877430234.1275084034&it=1669877429728&coo=false&rqm=GET
200 OK 86 kB URL HTTP/2 www.facebook.com/tr/?id=212787963132270&ev=PageView&dl=https%3A%2F%2Ffotolembranca.zoommy.com.br%2F&rl=&if=false&ts=1669877430236&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.2.1669877430234.1275084034&it=1669877429728&coo=false&rqm=GET
IP
File type gzip compressed data, from Unix\012- data
Hash f1db1f408a88e11e8a838cfd6d016f74
11d0c97c7fb34f4fecac25af908d18a9c3cc42ea
7cebc0800a93c1440567cd0bca0af04ae1c1ad19d1040d9342d3b87038b65159
GET /tr/?id=212787963132270&ev=PageView&dl=https%3A%2F%2Ffotolembranca.zoommy.com.br%2F&rl=&if=false&ts=1669877430236&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.2.1669877430234.1275084034&it=1669877429728&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 01 Dec 2022 06:50:31 GMT
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc1fe6f5b-2658-4434-b276-36d841c8ceee.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc1fe6f5b-2658-4434-b276-36d841c8ceee.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 42c762f71487f8e0285dd2129700f069
ec0fd74a981603e197df26c6fb79ef039f737557
8a40883d87b1e2c6e116e3cf881a8b39c987200a8556b651f78a376b3ddbaa26
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc1fe6f5b-2658-4434-b276-36d841c8ceee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8124
x-amzn-requestid: fd081821-1620-4a67-910e-9cbd193d5518
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbz-PE7goAMFddA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cd27-58193b957b3cf34d6a85c141;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:37:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z2OTA0ICaVgKY0tCiUqLIrS4wCvlkC2qSPwRL1kbWXrtiGZdfy78Kg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:45:25 GMT
age: 32710
etag: "ec0fd74a981603e197df26c6fb79ef039f737557"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
blob.contato.io/machine-files/all-images/WhatsApp.svg
200 OK 0 B URL HTTP/2 blob.contato.io/machine-files/all-images/WhatsApp.svg
IP
GET /machine-files/all-images/WhatsApp.svg HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 06:50:28 GMT
content-type: image/svg+xml
content-md5: IoPAmJJMXBXe295n150INQ==
last-modified: Mon, 18 Mar 2019 20:04:36 GMT
x-ms-request-id: 564b3055-801e-002f-4b7c-0027fa000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yJSU%2B28nFcGTZ2EHeF8%2Fvo8XzGGC8x461dTNtxZFQYjx0HI%2BzL5ojF8G9R0zgRK5hgahNuEvPW0HNVWDaCgXj%2FHneb%2Bajz3SW1K%2B2ivvF1dTKqmDaMgS7TRMOyoijqj9MSk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7729e387aea20b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400,300,500,700,900
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,300,500,700,900
IP
GET /css?family=Roboto:400,300,500,700,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fotolembranca.zoommy.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 01 Dec 2022 06:50:28 GMT
date: Thu, 01 Dec 2022 06:50:28 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
198.50.206.224
142.250.74.168
31.13.72.36
93.184.220.29
167.86.84.206
188.114.97.1
23.36.76.226
0.0.0.0