gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
173.212.200.60200 OK 3.0 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
IP 173.212.200.60:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6835), with CRLF line terminators
Hash e1ab7aa8a3ba8b82ed24a38a8da2b6c3
b718ee52621414d9ced6465ded851dfe7406c0c9
257847a0e822685adc56dd0c8457014330ccebe116f306536a76e03d0693f473
GET /TGS036524980080392828649009829874092 HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Access-Control-Max-Age: 1728000
Set-Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo; path=/; HttpOnly; SameSite=Lax
X-AspNetMvc-Version: 5.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 3005
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a4074549843769a3da3f055bcb5a78ff
f99062d34cf71bda6a9c64061fb9e61008f94021
895e3801806f031611a25bec5652cc1a46dfa76ea6784f5064d859c1a5b9ddf7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "895E3801806F031611A25BEC5652CC1A46DFA76EA6784F5064D859C1A5B9DDF7"
Last-Modified: Tue, 04 Apr 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19076
Expires: Wed, 05 Apr 2023 03:51:51 GMT
Date: Tue, 04 Apr 2023 22:33:55 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e50dac5108a698d61ca49516033d1a20
53d243b89fc00deb9bfae07351bbe36ddb7c1df3
e9e0ad98c485b56fe65ea0a8bc4974fff3f804fcf2d8f6266ada9acd27c7b7cc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E9E0AD98C485B56FE65EA0A8BC4974FFF3F804FCF2D8F6266ADA9ACD27C7B7CC"
Last-Modified: Tue, 04 Apr 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13737
Expires: Wed, 05 Apr 2023 02:22:52 GMT
Date: Tue, 04 Apr 2023 22:33:55 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Length, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 04 Apr 2023 22:28:46 GMT
content-type: application/json
age: 309
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 903ed2d58f1f33d069b70c4b53f1cb1f
0ef89cd6eb79a2ddd74434f9233cf486fffc1142
d8c984b50f04fcdb1ebc99d982502d85193302c85239ee7497666247edfc0061
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8C984B50F04FCDB1EBC99D982502D85193302C85239EE7497666247EDFC0061"
Last-Modified: Sun, 02 Apr 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3284
Expires: Tue, 04 Apr 2023 23:28:39 GMT
Date: Tue, 04 Apr 2023 22:33:55 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-05-20-17-04-38.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-05-20-17-04-38.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 95f61d351f5fc9533cc78e255ce9bc06
fba284117f347782ac23c51d141d7e3ec15a867e
7fcc5f9e52e389d8d7c6df7f1f2a1291ae0aaae8e554f3022239ab092b2ef3c3
GET /chains/remote-settings.content-signature.mozilla.org-2023-05-20-17-04-38.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: K5+dxbI1IuFK/Nn9mpo++7SILqxbbYacZzG09/Y3ZytN3OftYuucjx3fwHlyKueMInrxNBKIRrc=
x-amz-request-id: S280JYWG55BSQC4D
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 04 Apr 2023 21:53:18 GMT
age: 2437
last-modified: Fri, 31 Mar 2023 17:04:39 GMT
etag: "95f61d351f5fc9533cc78e255ce9bc06"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Apr 2023 22:33:55 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400,300,500,700,900
142.250.74.106200 OK 727 B URL HTTP/1.1 fonts.googleapis.com/css?family=Roboto:400,300,500,700,900
IP 142.250.74.106:0
Hash d07685dc916ed6abf8c4f12da7d65d0b
e4e015d15f1aa1c0efe8ecec580f35622373f91d
5d3acefa94aca5c02b6e798d7bcb70a75ae92b5d4dbf5eca64c50a189c0367fa
GET /css?family=Roboto:400,300,500,700,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Tue, 04 Apr 2023 22:33:55 GMT
Date: Tue, 04 Apr 2023 22:33:55 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
gbste-372098376209834.pagina.group/Content/font-awesome.css
173.212.200.60200 OK 7.5 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/Content/font-awesome.css
IP 173.212.200.60:0
File type troff or preprocessor input, ASCII text, with very long lines (372), with CRLF line terminators
Hash bbd5f8fd7be8efb041a953052619bd87
0ff1adf9c8db1b21660eb9c3bf503f7c8f8f5317
873b2c9b017ab71403abbe97b0ff568d994e431d0d4443fb2077a6203c11c2e7
GET /Content/font-awesome.css HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 30 Mar 2023 18:26:46 GMT
Accept-Ranges: bytes
ETag: "0772c2f3563d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 7456
gbste-372098376209834.pagina.group/builder/elements/css/magnific-popup.css
173.212.200.60200 OK 1.9 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/css/magnific-popup.css
IP 173.212.200.60:0
File type ASCII text, with CRLF line terminators
Hash fbef1c0fd4d1843e90fd44a6dc031ce4
3c314e670d86409aaa79f20a385537a6b50d0807
8f98469bd9fca981389ad5f092b78b08a67613740c22de3bd0c495aa24f739d9
GET /builder/elements/css/magnific-popup.css HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 1948
gbste-372098376209834.pagina.group/builder/elements/css/bootstrap.css
173.212.200.60200 OK 27 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/css/bootstrap.css
IP 173.212.200.60:0
File type assembler source, ASCII text, with very long lines (540), with CRLF line terminators
Hash a8b0b3c07caa6c06fc617cd1e2d314b8
1c71a719e52bc91dd1cc008325e93cc0fea1dfbf
7f32e0e125dfb0b5b35fd9f753cc218851bb7dcc4e8da6a30d3e07e288acf8c5
GET /builder/elements/css/bootstrap.css HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "8236f06ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 26806
gbste-372098376209834.pagina.group/builder/elements/css/iconfont-style.css
173.212.200.60200 OK 2.7 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/css/iconfont-style.css
IP 173.212.200.60:0
File type ASCII text, with CRLF line terminators
Hash 5ed720fa4769c94860ae3aa4fec47912
388fc3e443f4031e483bad7febe4a53278496c7d
fe56a7ad03543547201463d6ff6b48680c9d5811e3367050d630c0300bc8a64a
GET /builder/elements/css/iconfont-style.css HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 2701
gbste-372098376209834.pagina.group/builder/elements/css/style.css
173.212.200.60200 OK 9.5 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/css/style.css
IP 173.212.200.60:0
File type assembler source, ASCII text, with CRLF line terminators
Hash e29ab49f4dea0790803ef9a2299f3672
7e9c2adbba4e03e7ee11333990912a783db15543
2291669b70118b986134be252956a5d951ac0be05644e11fb0832a6eed748ba7
GET /builder/elements/css/style.css HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 9519
gbste-372098376209834.pagina.group/builder/elements/scripts/animations/animate.css
173.212.200.60200 OK 8.1 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/animations/animate.css
IP 173.212.200.60:0
File type ASCII text, with CRLF line terminators
Hash 51e2d7fa7f94e55efef498b61f59df72
ff681a417c71a1ff65e12cab1e05c47719f36850
c4f46bdc6a72482b1576b5393f78be4ecfb8a5d6550fbb4cde49811bc266eed2
GET /builder/elements/scripts/animations/animate.css HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "2022267ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 8057
gbste-372098376209834.pagina.group/builder/elements/scripts/html5shiv.js
173.212.200.60200 OK 1.6 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/html5shiv.js
IP 173.212.200.60:0
File type HTML document, ASCII text, with very long lines (645), with CRLF line terminators
Hash 9e7e532dfb442740ed7be68fa2c69fc4
e58cb86fe87d9fa3fb87bcac0f843abf1a69c19e
899a4b0d542690c05a45e0e0341b5dcdea7e9845de54fc7da6f35c2a8f56c47c
GET /builder/elements/scripts/html5shiv.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "2022267ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 1574
gbste-372098376209834.pagina.group/builder/elements/css/popup.css
173.212.200.60200 OK 826 B URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/css/popup.css
IP 173.212.200.60:0
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash d151c554db8f93a040584352cd6a3675
4a1c594ea768015533e0526722d8d7dd15948d1b
97afa0970294b7491e87d60b1b0324a6a4dac425f9c0b9051f854dac507bdd8c
GET /builder/elements/css/popup.css HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 826
gbste-372098376209834.pagina.group/builder/elements/scripts/respond.min.js
173.212.200.60200 OK 2.2 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/respond.min.js
IP 173.212.200.60:0
File type HTML document, ASCII text, with very long lines (4453), with CRLF line terminators
Hash db3026138f8e2d87619f74400b93c39c
35a78bd2bcdc3353acb6b55ed5e658d494c8f8a5
8158df7b6ca794cb3f0a9f7592a16ac174a40a0a3b2cb40dd9206522ddb1f3cc
GET /builder/elements/scripts/respond.min.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 2227
gbste-372098376209834.pagina.group/builder/elements/scripts/bootstrap.min.js
173.212.200.60200 OK 9.3 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/bootstrap.min.js
IP 173.212.200.60:0
File type ASCII text, with very long lines (25999), with CRLF line terminators
Hash 08b83522ffd3149c43a50fdd3ecedbdf
a668390cef79859090e79f76dc9571a8cb24e62b
280e6bf201444b7d029a5f941dc54bffa60693f643878371590b56aa231e19b0
GET /builder/elements/scripts/bootstrap.min.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "2022267ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 9255
gbste-372098376209834.pagina.group/builder/elements/scripts/jquery.validate.min.js
173.212.200.60200 OK 6.5 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/jquery.validate.min.js
IP 173.212.200.60:0
File type Unicode text, UTF-8 text, with very long lines (1290), with CRLF line terminators
Hash 7d263a6fee7c860dcd31de7553b83c3e
baa4adac1e8756be91dca6cfb7c8c7120b4569b9
40a01db94cd3059e243d2a065ce01e70901bac367611608e41f6dd3f0f968f20
GET /builder/elements/scripts/jquery.validate.min.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 6523
gbste-372098376209834.pagina.group/builder/elements/scripts/smoothscroll.js
173.212.200.60200 OK 7.0 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/smoothscroll.js
IP 173.212.200.60:0
File type ASCII text, with CRLF line terminators
Hash 0511e979bcf48817404090fa6fc42b3a
51573d216d1aee90897e1cdf7b3f7f1dd1a45778
54b4c6c9807f2716418fba5cd4edbb82d01b5df909d59295ac0943e12aeaeecf
GET /builder/elements/scripts/smoothscroll.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 6951
gbste-372098376209834.pagina.group/builder/elements/scripts/jquery.smooth-scroll.min.js
173.212.200.60200 OK 1.3 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/jquery.smooth-scroll.min.js
IP 173.212.200.60:0
File type ASCII text, with very long lines (2772), with CRLF line terminators
Hash e3193470ad0b8623615e00dc2d85306c
e06140a9b9bcf075736e1cd15f0e70e8a5f170a2
452c814761bf7f4dfd1e32b28baae00ef6b0c3d84e0a4a530de947f53c08130e
GET /builder/elements/scripts/jquery.smooth-scroll.min.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 1326
gbste-372098376209834.pagina.group/builder/elements/scripts/placeholders.jquery.min.js
173.212.200.60200 OK 1.8 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/placeholders.jquery.min.js
IP 173.212.200.60:0
File type ASCII text, with very long lines (4610), with CRLF line terminators
Hash 4dbaa6f342cbd0313e12666ebe6a40ce
05ee066c89d51fd8f0d38f77046a66c19d33395e
fda96665e1ad894fb3e802c992bc77ff85e2b612ef78918590800aa69f827164
GET /builder/elements/scripts/placeholders.jquery.min.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 1756
gbste-372098376209834.pagina.group/builder/elements/scripts/jquery-1.11.2.min.js
173.212.200.60200 OK 33 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/jquery-1.11.2.min.js
IP 173.212.200.60:0
File type ASCII text, with very long lines (32047), with CRLF line terminators
Hash aaf82bda7cd98e77c8c75cd05bba4a14
893ad0c277f5422d0df55d5118c4f76df140f28f
3ed20e8c51c705d3eb8e4a7bc3f59b4eaf3250cc32a94fb4208a32442d8393af
GET /builder/elements/scripts/jquery-1.11.2.min.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 33380
gbste-372098376209834.pagina.group/builder/elements/scripts/jquery.magnific-popup.min.js
173.212.200.60200 OK 7.6 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/jquery.magnific-popup.min.js
IP 173.212.200.60:0
File type ASCII text, with very long lines (20818), with CRLF line terminators
Hash cf8fae33adbb05d7cc3a8368cfe92b91
4ff230694c4af866fe2fdf3be99dbefd62e58c6d
f6d8e01b05de02829459d9ddfad46690139b72cf8198ffafa69c542c46e0f709
GET /builder/elements/scripts/jquery.magnific-popup.min.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 7618
fonts.googleapis.com/css?family=Hind:600,300|Roboto:500,100,300|Abril+Fatface|Open+Sans:400,700,800|Montserrat:400,700|Droid+Sans:400,700|Arvo:400,700|Cabin:400,700|Patua+One|Raleway:400,700|Lobster|Josefin+Sans:400,700|Poppins:400,700|Montserrat+Alternates:400,700
142.250.74.106200 OK 2.0 kB URL HTTP/1.1 fonts.googleapis.com/css?family=Hind:600,300|Roboto:500,100,300|Abril+Fatface|Open+Sans:400,700,800|Montserrat:400,700|Droid+Sans:400,700|Arvo:400,700|Cabin:400,700|Patua+One|Raleway:400,700|Lobster|Josefin+Sans:400,700|Poppins:400,700|Montserrat+Alternates:400,700
IP 142.250.74.106:0
Hash 1520c6510758f9288760f1e1a6e69d29
8dfc003eaa53159524e467a27c91b031072cbdd0
bff0544eb350cf282c2af7d6eb30312952b73e75b7bfca65b1685008e66976f6
GET /css?family=Hind:600,300|Roboto:500,100,300|Abril+Fatface|Open+Sans:400,700,800|Montserrat:400,700|Droid+Sans:400,700|Arvo:400,700|Cabin:400,700|Patua+One|Raleway:400,700|Lobster|Josefin+Sans:400,700|Poppins:400,700|Montserrat+Alternates:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Tue, 04 Apr 2023 22:33:55 GMT
Date: Tue, 04 Apr 2023 22:33:55 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
gbste-372098376209834.pagina.group/builder/elements/scripts/jquery.counterup.min.js
173.212.200.60200 OK 760 B URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/jquery.counterup.min.js
IP 173.212.200.60:0
File type ASCII text, with very long lines (917), with CRLF line terminators
Hash b5436c6aee66bec6982803309dfbef6d
73a7375793bf3b4915976b4b31ccb981791ac0f5
da7e5ffd7f9c6f620a7eba40b72392b2f433edc851b1774780a98d08bd274af3
GET /builder/elements/scripts/jquery.counterup.min.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "2022267ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 760
gbste-372098376209834.pagina.group/builder/elements/scripts/waypoints.min.js
173.212.200.60200 OK 2.6 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/waypoints.min.js
IP 173.212.200.60:0
File type ASCII text, with very long lines (7828), with CRLF line terminators
Hash fa640bc5c2156cd5576a40837f8fcba4
629266ff9e715282cbc06f15ade9d96ae15ff083
3d7a4de379483158d939e4ed58560d8e5d26281989364c8c3670f81b41537ba6
GET /builder/elements/scripts/waypoints.min.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 2608
gbste-372098376209834.pagina.group/builder/elements/scripts/video.js
173.212.200.60200 OK 17 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/video.js
IP 173.212.200.60:0
File type HTML document, ASCII text, with very long lines (1117), with CRLF line terminators
Hash be30a65800191e7c8ad66da6d54ed4fc
32431fc21084b7f7992c19a991d5d781284a2675
ac65f4108646539b8162788b82f12a77ae9bc27aa9121b56f7215703570f50b7
GET /builder/elements/scripts/video.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 17084
gbste-372098376209834.pagina.group/builder/elements/scripts/animations/wow.min.js
173.212.200.60200 OK 2.7 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/animations/wow.min.js
IP 173.212.200.60:0
File type ASCII text, with very long lines (8152), with CRLF line terminators
Hash acbc141c1c0883ff0b4fad9765521c98
4bd2bb41f5f64d65d6d3b95032fda5adf9fcc8a9
a3c0807baa6170c1887365dad3c52eb00b156976552441e0c6453d4497dc5c10
GET /builder/elements/scripts/animations/wow.min.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 2706
gbste-372098376209834.pagina.group/builder/elements/scripts/bigvideo.js
173.212.200.60200 OK 3.2 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/bigvideo.js
IP 173.212.200.60:0
File type HTML document, ASCII text, with CRLF line terminators
Hash ad3faf99c4eaa606884a47ef7a3706fe
054a6e92c54bed921a6304a0f17300254c7b5be2
aadde46250c66685965f84dd82ef48dd8e1fc4e98a057890628ae20af58ef84a
GET /builder/elements/scripts/bigvideo.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 3174
gbste-372098376209834.pagina.group/builder/elements/scripts/jquery.jCounter-0.1.4.js
173.212.200.60200 OK 3.6 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/jquery.jCounter-0.1.4.js
IP 173.212.200.60:0
File type ASCII text, with CRLF line terminators
Hash 0e0c27f5ff75537c90d6d5eeb8e7e480
371a90388d9272ae4f1409331cd08ab6af02da3d
9854e4990696297519dd8a4d7cd8b684b355f1d253fb368a7e7a0a72f3ea8dda
GET /builder/elements/scripts/jquery.jCounter-0.1.4.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 3600
gbste-372098376209834.pagina.group/builder/elements/scripts/jquery.autogrow-textarea.js
173.212.200.60200 OK 1.1 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/jquery.autogrow-textarea.js
IP 173.212.200.60:0
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 1d61f85758980cf588aadd5763499dc9
652afe4c5a812e4f40f31d15eeb55cdfafd9ffe7
4cd1382ef93bc266758268a16a779c6247f8604b2351d4d2646c6914bba4c7fd
GET /builder/elements/scripts/jquery.autogrow-textarea.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 1075
gbste-372098376209834.pagina.group/scripts/globalize/cultures/globalize.culture.pt-BR.js
173.212.200.60200 OK 1.2 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/scripts/globalize/cultures/globalize.culture.pt-BR.js
IP 173.212.200.60:0
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash c74a432205f42ce5ff9296d6692b7f8f
f7f92eac6502c988680315ba3ad743937f1e6159
227250da5093382837b28b2c011b832f7666764b86bb8f7ebd2139ae13f7759f
GET /scripts/globalize/cultures/globalize.culture.pt-BR.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:35 GMT
Accept-Ranges: bytes
ETag: "d4398e8ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 1159
gbste-372098376209834.pagina.group/scripts/globalize/globalize.js
173.212.200.60200 OK 13 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/scripts/globalize/globalize.js
IP 173.212.200.60:0
File type ASCII text, with CRLF line terminators
Hash 97e7ddb6884cba8cfa278c346037dd7a
ce4028b8837e2a73a2279b9d031ad005ee071bb5
779a1cc04988bc4dd98fe549d1c3b7d67694f5c6807518fd68dcfff916109a1f
GET /scripts/globalize/globalize.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:35 GMT
Accept-Ranges: bytes
ETag: "808b618ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 13217
gbste-372098376209834.pagina.group/builder/elements/scripts/custom.js
173.212.200.60200 OK 2.2 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/custom.js
IP 173.212.200.60:0
File type ASCII text, with CRLF line terminators
Hash 8c49e213a3d7981ee9ea29351521c023
578bd9922c8a565b8e1ec42f081b32b6b7d1271b
95655d17b4f431c32600057aa34b29bfd2e20683894ae418626a5f6e98b4a508
GET /builder/elements/scripts/custom.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 2215
gbste-372098376209834.pagina.group/builder/elements/scripts/popup.js
173.212.200.60200 OK 2.9 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/builder/elements/scripts/popup.js
IP 173.212.200.60:0
File type HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (2600), with CRLF line terminators
Hash 32f45493e9b183a0787d697dc9fa6eaa
a230b5858ca7aaff1301ff2b8fef2fc57041334d
e190877aad826dd93e944df359c555a86943b1dba098c1b1996b8b0af6e416e3
GET /builder/elements/scripts/popup.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:32 GMT
Accept-Ranges: bytes
ETag: "0c8976ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 2860
gbste-372098376209834.pagina.group/Content/carousel.v2.css
173.212.200.60200 OK 984 B URL HTTP/1.1 gbste-372098376209834.pagina.group/Content/carousel.v2.css
IP 173.212.200.60:0
File type ASCII text, with CRLF line terminators
Hash 55ac93ad41eff663d5577651af6daf3c
926473f8ec6afd0d9a8e4a2ce62b9034912aedd0
facc78e2985f074458aa51f9c3c2e14776125527bff599c9e73d8cad7c3b992c
GET /Content/carousel.v2.css HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:33 GMT
Accept-Ranges: bytes
ETag: "805e307ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 984
gbste-372098376209834.pagina.group/Contents/page-advertising?v=OIjdLiP3zDbbwyGzc4HCP78v7aQq62NmROEun6odIEE1
173.212.200.60200 OK 954 B URL HTTP/1.1 gbste-372098376209834.pagina.group/Contents/page-advertising?v=OIjdLiP3zDbbwyGzc4HCP78v7aQq62NmROEun6odIEE1
IP 173.212.200.60:0
File type ASCII text, with very long lines (3114), with no line terminators
Hash 109cc50c7f7469599a5be2cb7a4fc3f3
18495c3d02840daea97d76535913722bb92265ee
b387bac53e48e6cdaad38ec7576c139d6e71083bcb39e93bfe248485caada8c2
GET /Contents/page-advertising?v=OIjdLiP3zDbbwyGzc4HCP78v7aQq62NmROEun6odIEE1 HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: public
Content-Type: text/css; charset=utf-8
Content-Encoding: gzip
Expires: Wed, 03 Apr 2024 22:33:56 GMT
Last-Modified: Tue, 04 Apr 2023 22:33:56 GMT
Vary: User-Agent,Accept-Encoding
Server: Microsoft-IIS/10.0
Access-Control-Max-Age: 1728000
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 954
gbste-372098376209834.pagina.group/bundles/page-views?v=RFS_9pcQpAX3kK36TH6nfMX6edR9IzqGFT5-MduLznc1
173.212.200.60200 OK 355 B URL HTTP/1.1 gbste-372098376209834.pagina.group/bundles/page-views?v=RFS_9pcQpAX3kK36TH6nfMX6edR9IzqGFT5-MduLznc1
IP 173.212.200.60:0
File type ASCII text, with very long lines (357), with no line terminators
Hash b6984199ec0f51e93d7064a7be4bd6d2
304aeaaa4c574a8a71d60894fb04ea9671f47eeb
37669d38f2ef8020e68fd75094cb708b0432e1e645ed2606509251e1e4034ff0
GET /bundles/page-views?v=RFS_9pcQpAX3kK36TH6nfMX6edR9IzqGFT5-MduLznc1 HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: public
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
Expires: Wed, 03 Apr 2024 22:33:56 GMT
Last-Modified: Tue, 04 Apr 2023 22:33:56 GMT
Vary: User-Agent,Accept-Encoding
Server: Microsoft-IIS/10.0
Access-Control-Max-Age: 1728000
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 355
gbste-372098376209834.pagina.group/bundles/globalize?v=Z7dQo83eosj7yLn2TxGEoPKpiluP65U_S4JHNU9GjkM1
173.212.200.60200 OK 9.6 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/bundles/globalize?v=Z7dQo83eosj7yLn2TxGEoPKpiluP65U_S4JHNU9GjkM1
IP 173.212.200.60:0
File type Unicode text, UTF-8 text, with very long lines (22548), with no line terminators
Hash 9b684658a726e0a83c356ea383341cd8
6cbd5cf03bd967ff0c424f6d453dcc3361f4d315
367ff260bbd848a31cda11fcb844f4d4ddc1957f777b5421fb93e713f34d715e
GET /bundles/globalize?v=Z7dQo83eosj7yLn2TxGEoPKpiluP65U_S4JHNU9GjkM1 HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: public
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
Expires: Wed, 03 Apr 2024 22:33:56 GMT
Last-Modified: Tue, 04 Apr 2023 22:33:56 GMT
Vary: User-Agent,Accept-Encoding
Server: Microsoft-IIS/10.0
Access-Control-Max-Age: 1728000
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 9649
gbste-372098376209834.pagina.group/scripts/jquery.form.js
173.212.200.60200 OK 12 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/scripts/jquery.form.js
IP 173.212.200.60:0
File type ASCII text, with CRLF line terminators
Hash a98c60d4553918fbb1973e91a1c3a779
31303f1b3f3decd341ce80edd7270c2451308193
a94b02e4afafbefd46deaded722c8ffc0059153d7a54e1831d02212dd9144e5b
GET /scripts/jquery.form.js HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 12 Jan 2023 21:08:35 GMT
Accept-Ranges: bytes
ETag: "808b618ca26d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 12255
gbste-372098376209834.pagina.group/bundles/page-capform?v=KNHAZZuHsaBypgrGEGz6ldaVigcr0IqAbNnKRPnF7Oo1
173.212.200.60200 OK 2.5 kB URL HTTP/1.1 gbste-372098376209834.pagina.group/bundles/page-capform?v=KNHAZZuHsaBypgrGEGz6ldaVigcr0IqAbNnKRPnF7Oo1
IP 173.212.200.60:0
File type ASCII text, with very long lines (6651), with no line terminators
Hash 504f93230503310cd94c3e83fb707f0b
07dd2f4922d084bec2a2e133f1dc4e80c1c6408e
a50569d85eb2abc02ad391382d458d855c69332f4861208d9cfa4e3cf3c616af
GET /bundles/page-capform?v=KNHAZZuHsaBypgrGEGz6ldaVigcr0IqAbNnKRPnF7Oo1 HTTP/1.1
Host: gbste-372098376209834.pagina.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/TGS036524980080392828649009829874092
Cookie: ASP.NET_SessionId=o2dc14tawxa1mteaqc1vpsfo
HTTP/1.1 200 OK
Cache-Control: public
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
Expires: Wed, 03 Apr 2024 22:33:56 GMT
Last-Modified: Tue, 04 Apr 2023 22:33:56 GMT
Vary: User-Agent,Accept-Encoding
Server: Microsoft-IIS/10.0
Access-Control-Max-Age: 1728000
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Tue, 04 Apr 2023 22:33:55 GMT
Content-Length: 2536
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1c682b982d1ecaa1d27cb4da560edd95
fa046ceed7b97d3893993b65490b24f718bd1d7a
4faa28c9a8c88aa88a28e8065763938a3cf81e62a244482b280a58e825f5a904
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4FAA28C9A8C88AA88A28E8065763938A3CF81E62A244482B280A58E825F5A904"
Last-Modified: Mon, 03 Apr 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2831
Expires: Tue, 04 Apr 2023 23:21:06 GMT
Date: Tue, 04 Apr 2023 22:33:55 GMT
Connection: keep-alive
push.services.mozilla.com/
34.117.65.55101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.117.65.55:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: wHW5EirLXD0MMSEn6EM7XQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ABrrfYfIiOd6ekd0PEVybky1tKM=
Date: Tue, 04 Apr 2023 22:33:55 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Expires, Cache-Control, Content-Length, Retry-After, Last-Modified, Pragma, ETag, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 04 Apr 2023 22:17:29 GMT
age: 987
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
194.113.64.23/31VBO3827SF8725/ZKPZATJAV880392.php
194.113.64.23403 Forbidden 57 B URL HTTP/1.1 194.113.64.23/31VBO3827SF8725/ZKPZATJAV880392.php
IP 194.113.64.23:0
ASN #47583 Hostinger International Limited
File type HTML document, ASCII text, with no line terminators
Hash 1d72fa02a44c446d79cbe240728768c5
5b5e745e46e58c9ce36abadb92b677e2082d783a
68e06f5f67b5bb1ec93a91d88df86c23871e1b609ca1fb7ab81b619e1a465782
Analyzer Verdict Alert quad9 Sinkholed
GET /31VBO3827SF8725/ZKPZATJAV880392.php HTTP/1.1
Host: 194.113.64.23
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 403 Forbidden
Date: Tue, 04 Apr 2023 22:33:56 GMT
Server: Apache/2.4.7 (Ubuntu)
Content-Length: 57
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 98437f675562ae2af8df0fdaf1369f43
c4deaf8e798062e62d94f95268b5164ff40ebced
ee9c92d96eb1f6214f6bf42b234bc144d0cada1746fbd94ee8b595d8b765165b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 22:33:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/
142.250.74.4200 OK 56 kB IP 142.250.74.4:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (20587)
Hash eb03473190972bed143412ee2ec81526
66d9b62d264e3a88aac0d815e781625c44e0cd0e
379bcbea7bc4dc068fdf56a395b97a5227f2871803910e8ad244d4777e5f97f7
GET / HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://194.113.64.23/
Cookie: __Secure-ENID=5.SE=WgoywoGOUEmJadxoIB0r2lkzXHeKVqth1xGOa4ffzT7dUHt-ZXjx-iHV7oK7BCuj96T6WcNdOxtcPrvT6hvt4NQxsLWhAuRLpweU30AweJoV-BgqMIIyysdeq33RUY6ph26qQ9jBKSd0XSV6yoBSxOS9PmgWEsI53hUDjv_5qeI; CONSENT=PENDING+883
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Apr 2023 22:33:56 GMT
expires: -1
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
content-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-PLC6EHo4tnswaFMu1bZPMA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-encoding: br
server: gws
content-length: 55963
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: AEC=AUEFqZfNonGGn5N7Yb8w5RcJy0PQx4v-qW_ipZl1iEr5m9UtaUlgiUPrKg; expires=Sun, 01-Oct-2023 22:33:56 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
__Secure-ENID=11.SE=FD7F4AIu3XgW-vrxBwGSGPVQhpK4gvj9hgjk6K2Hf1doHzUjeq7eW0SVIT3U_hgC_-ufE9jDaFjKq4uD1STaQg4NxRHR2NdLEh7xsQbTboJAAo478CUYI4hzVlK6TU13kZL4ORr5J8stADsUlB8pnteop1lo-ObSXCVSqHEgNd4; expires=Sat, 04-May-2024 14:52:14 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blob.contato.io/machine-files/builder/menudrop.css
188.114.97.1200 OK 773 B URL HTTP/2 blob.contato.io/machine-files/builder/menudrop.css
IP 188.114.97.1:0
File type ASCII text, with CRLF line terminators
Hash 8344a84b35b6cce08ecc41c84d3075ea
6d86f107387ffecda8478515b2c0233c8fc84b9f
2cb1108beb57c4a42fe99ec0e4b33b5f3a7de28258301e983428bcef4a1539bd
GET /machine-files/builder/menudrop.css HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Apr 2023 22:33:56 GMT
content-type: text/css
content-md5: JJNpfDzxKNCYrtCEEquVxA==
last-modified: Mon, 06 Mar 2017 18:37:13 GMT
x-ms-request-id: 85cba6b7-d01e-003c-481b-5e121b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4u3mDgj1hJw6N97AOO6n3SHkggM%2BTZEr08KStFxtkFvVdWMmv%2BrIcWTzwU%2BxHmao3q5HhRER5QbfeJf7gLWAmVig8W53%2FFwR4AiBCHxcnVFILAdth5JJbE5yxp6O5S2gkd4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b2d040a4d12b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 56c71eaf36368e415c26682707de1f4b
11fa3f31278035c07813bf6f17361ac20442c900
a86434a20450dfd2b7787c1759e2e9b502bc89cf579fed44e6e698b27fc90203
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 22:33:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/images/branding/googlelogo/1x/googlelogo_color_272x92dp.png
142.250.74.4200 OK 6.0 kB URL HTTP/2 www.google.com/images/branding/googlelogo/1x/googlelogo_color_272x92dp.png
IP 142.250.74.4:0
File type PNG image data, 272 x 92, 8-bit/color RGBA, non-interlaced\012- data
Hash 8f9327db2597fa57d2f42b4a6c5a9855
1737d3dfb411c07b86ed8bd30f5987a4dc397cc1
5776cd87617eacec3bc00ebcf530d1924026033eda852f706c1a675a98915826
GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Cookie: __Secure-ENID=11.SE=FD7F4AIu3XgW-vrxBwGSGPVQhpK4gvj9hgjk6K2Hf1doHzUjeq7eW0SVIT3U_hgC_-ufE9jDaFjKq4uD1STaQg4NxRHR2NdLEh7xsQbTboJAAo478CUYI4hzVlK6TU13kZL4ORr5J8stADsUlB8pnteop1lo-ObSXCVSqHEgNd4; CONSENT=PENDING+883; AEC=AUEFqZfNonGGn5N7Yb8w5RcJy0PQx4v-qW_ipZl1iEr5m9UtaUlgiUPrKg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 5969
date: Tue, 04 Apr 2023 22:33:56 GMT
expires: Tue, 04 Apr 2023 22:33:56 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash d9209152015bce63ee2d21cc0d966532
7fb6b50059f25e76e0acd9f8ced75095ba7474fe
e3d734e1657051dfd33351e97078cf4e5210332ac63e0b104ff73e913011f024
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 22:33:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/i/productlogos/googleg/v6/24px.svg
216.58.207.227200 OK 438 B URL HTTP/2 fonts.gstatic.com/s/i/productlogos/googleg/v6/24px.svg
IP 216.58.207.227:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (742), with no line terminators
Hash 55034acc07f2e9996714f3a26001a021
466900a397cef93422a85bd415fa47101e1f6832
d7e3613dad665c5681aa7d2896f9f840e117b0275db09e16070ed6e06fb5ea0c
GET /s/i/productlogos/googleg/v6/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 438
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Apr 2023 10:31:18 GMT
expires: Wed, 03 Apr 2024 10:31:18 GMT
cache-control: public, max-age=31536000
age: 43358
last-modified: Wed, 20 Apr 2022 17:17:30 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/inputtools/images/tia.png
142.250.74.35200 OK 151 B URL HTTP/2 www.gstatic.com/inputtools/images/tia.png
IP 142.250.74.35:0
File type PNG image data, 19 x 11, 8-bit/color RGBA, non-interlaced\012- data
Hash 0667c2bf932c77b80ef533c5dc1bd7ff
18015c76d9b6861d576841652e6963dad26a3e35
4ebecfbb2c9cff1741b805876370db38d862a037f652d6f647ce51995e03df2c
GET /inputtools/images/tia.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/inputtools
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="inputtools"
report-to: {"group":"inputtools","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/inputtools"}]}
content-length: 151
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Apr 2023 09:32:29 GMT
expires: Wed, 03 Apr 2024 09:32:29 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
vary: Origin
age: 46887
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/og/_/ss/k=og.qtm.drkSKXlLNzg.L.F4.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin,qhpr/d=1/ed=1/ct=zgms/rs=AA2YrTvfaDR9xv_bw2gL4AmQVSLFC_Wc8w
142.250.74.35200 OK 273 B URL HTTP/2 www.gstatic.com/og/_/ss/k=og.qtm.drkSKXlLNzg.L.F4.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin,qhpr/d=1/ed=1/ct=zgms/rs=AA2YrTvfaDR9xv_bw2gL4AmQVSLFC_Wc8w
IP 142.250.74.35:0
File type ASCII text, with very long lines (386), with no line terminators
Hash f4966ff2f4791134a3d7be21538c4173
8bc889ab88ad57047a60ce5905e4b446060c0a9a
d78867809aaf28bdf70a16ed7aa203e0aad6575ab1f181cc10444e9d92ab25c0
GET /og/_/ss/k=og.qtm.drkSKXlLNzg.L.F4.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin,qhpr/d=1/ed=1/ct=zgms/rs=AA2YrTvfaDR9xv_bw2gL4AmQVSLFC_Wc8w HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="one-google-eng"
report-to: {"group":"one-google-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/one-google-eng"}]}
content-length: 273
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Apr 2023 07:30:25 GMT
expires: Wed, 03 Apr 2024 07:30:25 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 28 Mar 2023 01:44:36 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding, Origin
age: 54211
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/og/_/js/k=og.qtm.en_US.YM-toka6S30.2019.O/rt=j/m=qabr,q_dnp,qcwid,qapid,qald/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin,qhpr/d=1/ed=1/rs=AA2YrTtPoSYeKV4HZpHHLrSUeYFATZRKnA
142.250.74.35200 OK 67 kB URL HTTP/2 www.gstatic.com/og/_/js/k=og.qtm.en_US.YM-toka6S30.2019.O/rt=j/m=qabr,q_dnp,qcwid,qapid,qald/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin,qhpr/d=1/ed=1/rs=AA2YrTtPoSYeKV4HZpHHLrSUeYFATZRKnA
IP 142.250.74.35:0
File type ASCII text, with very long lines (2119)
Hash 358f49fb77fba1b8a2fc3c4a304e98d2
506857bb9c05cb8a536f1065c8df73de994ed67f
89ef5636627889128582ff9b05ebd80a18290cdc1e691632935be6cff47dcafb
GET /og/_/js/k=og.qtm.en_US.YM-toka6S30.2019.O/rt=j/m=qabr,q_dnp,qcwid,qapid,qald/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin,qhpr/d=1/ed=1/rs=AA2YrTtPoSYeKV4HZpHHLrSUeYFATZRKnA HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="one-google-eng"
report-to: {"group":"one-google-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/one-google-eng"}]}
content-length: 67282
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Apr 2023 09:29:06 GMT
expires: Wed, 03 Apr 2024 09:29:06 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 31 Mar 2023 01:39:11 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding, Origin
age: 47090
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash d9209152015bce63ee2d21cc0d966532
7fb6b50059f25e76e0acd9f8ced75095ba7474fe
e3d734e1657051dfd33351e97078cf4e5210332ac63e0b104ff73e913011f024
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 22:33:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash d90a25edb06ef350ef2c6fff10e32ec7
4394a7cfb58ed724e191180c95f9451780381320
f9e7fb3a92aba6196d15966d4574c5f3dd6ee25c72ec28ca8ba7f42ca2f2369a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 22:33:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.fpEXMBCWMKc.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9SQGHwxhl93I-W5KEIEdf87vGuqQ/cb=gapi.loaded_0
172.217.21.174200 OK 38 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.fpEXMBCWMKc.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9SQGHwxhl93I-W5KEIEdf87vGuqQ/cb=gapi.loaded_0
IP 172.217.21.174:0
File type ASCII text, with very long lines (1530)
Hash 47ae9b25af86702d77c7895ac6f6b57c
f56f78729b99247a975620a1103cac3ee9f313a5
9bde79a1b0866f68d6baa43f920e971b5feb35a8e0af7ffadc114366f8538224
GET /_/scs/abc-static/_/js/k=gapi.gapi.en.fpEXMBCWMKc.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9SQGHwxhl93I-W5KEIEdf87vGuqQ/cb=gapi.loaded_0 HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Cookie: __Secure-ENID=11.SE=FD7F4AIu3XgW-vrxBwGSGPVQhpK4gvj9hgjk6K2Hf1doHzUjeq7eW0SVIT3U_hgC_-ufE9jDaFjKq4uD1STaQg4NxRHR2NdLEh7xsQbTboJAAo478CUYI4hzVlK6TU13kZL4ORr5J8stADsUlB8pnteop1lo-ObSXCVSqHEgNd4; CONSENT=PENDING+883; AEC=AUEFqZfNonGGn5N7Yb8w5RcJy0PQx4v-qW_ipZl1iEr5m9UtaUlgiUPrKg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 38398
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Apr 2023 05:17:21 GMT
expires: Tue, 02 Apr 2024 05:17:21 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 09 Mar 2023 15:42:16 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 148596
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 869fe4a8dc549ffa1023d3adc184e4f2
37b95d88dd3f6f251bb651b130e09b202850033f
9387d0291fa66cc98248bae7724ec34f884c766302d2a99e734585cc591ad304
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9387D0291FA66CC98248BAE7724EC34F884C766302D2A99E734585CC591AD304"
Last-Modified: Mon, 03 Apr 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11206
Expires: Wed, 05 Apr 2023 01:40:43 GMT
Date: Tue, 04 Apr 2023 22:33:57 GMT
Connection: keep-alive
blob.contato.io/machine-files/builder/navdropdown.js
188.114.97.1200 OK 1.1 kB URL HTTP/2 blob.contato.io/machine-files/builder/navdropdown.js
IP 188.114.97.1:0
File type ASCII text, with CRLF line terminators
Hash d6adf3b97f3cdfac87b746b4e2bb3c2a
874fe107fdd8efd68ce74ea561fbcf46bf35ed3a
934326380036872cfe7a6a4492d90b7f0b6a16085c0adf22fc5418aaf6fcda56
GET /machine-files/builder/navdropdown.js HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Apr 2023 22:33:55 GMT
content-type: application/javascript
content-md5: x4bwYb8liVm/Lv/38O5IOw==
last-modified: Fri, 08 Jun 2018 21:05:03 GMT
x-ms-request-id: cc70d5c5-901e-0030-6006-5efcea000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: HIT
age: 1450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vr6OqQwyiBx2jUBFmHRCxfCvYX1uyZT0%2FvjKItgGh6IkqqrdvF5q08n5KUx3kdzJ6ar2FMW%2BLxcz3dm7S%2FwKb5IXySL636PZI9gr3fisMkjpz9Ld%2FdWRckiubb2yTUqCfc8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b2d040a3d04b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 869fe4a8dc549ffa1023d3adc184e4f2
37b95d88dd3f6f251bb651b130e09b202850033f
9387d0291fa66cc98248bae7724ec34f884c766302d2a99e734585cc591ad304
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9387D0291FA66CC98248BAE7724EC34F884C766302D2A99E734585CC591AD304"
Last-Modified: Mon, 03 Apr 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11206
Expires: Wed, 05 Apr 2023 01:40:43 GMT
Date: Tue, 04 Apr 2023 22:33:57 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 869fe4a8dc549ffa1023d3adc184e4f2
37b95d88dd3f6f251bb651b130e09b202850033f
9387d0291fa66cc98248bae7724ec34f884c766302d2a99e734585cc591ad304
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9387D0291FA66CC98248BAE7724EC34F884C766302D2A99E734585CC591AD304"
Last-Modified: Mon, 03 Apr 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11206
Expires: Wed, 05 Apr 2023 01:40:43 GMT
Date: Tue, 04 Apr 2023 22:33:57 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 869fe4a8dc549ffa1023d3adc184e4f2
37b95d88dd3f6f251bb651b130e09b202850033f
9387d0291fa66cc98248bae7724ec34f884c766302d2a99e734585cc591ad304
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9387D0291FA66CC98248BAE7724EC34F884C766302D2A99E734585CC591AD304"
Last-Modified: Mon, 03 Apr 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11206
Expires: Wed, 05 Apr 2023 01:40:43 GMT
Date: Tue, 04 Apr 2023 22:33:57 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e436c7d-e108-4689-b94e-5ff6e0dfdf0a.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e436c7d-e108-4689-b94e-5ff6e0dfdf0a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dd12555800d3b88954dfea270dc2e42e
1ef8b33524eacd8ea134937f55b2b4c704215992
0da83c486b906ca380982c4006e5b6d9235863056fb43945d74b55453ba07e8b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e436c7d-e108-4689-b94e-5ff6e0dfdf0a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9667
x-amzn-requestid: 688e8919-43f5-461e-8fe2-c37f9d9d4771
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CoomuG7gIAMFWMA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642687c4-4f0b41fe5abeb8af44317551;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Fri, 31 Mar 2023 07:12:04 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Eg7iFXrRmw7NlzCTZaSqetbmBptwCFtp7h2ZIWf_on4gPlXUQp_2fA==
via: 1.1 53ee82a7eb57de316cba44c26680b4a6.cloudfront.net (CloudFront), 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Apr 2023 19:58:14 GMT
age: 9343
etag: "1ef8b33524eacd8ea134937f55b2b4c704215992"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bfd0521-1109-419c-8b3c-62fa0adf6af2.png
34.120.237.76200 OK 4.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bfd0521-1109-419c-8b3c-62fa0adf6af2.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7d3beb6b22ff0d6eb1aad285540865e9
56d6b25f47f0871ed51b3c7f5d93ba6a9142474c
05524480fe20b8fc8901b4e401d9352eba230fc91b8893aaba8b8defdcffdd2d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bfd0521-1109-419c-8b3c-62fa0adf6af2.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4149
x-amzn-requestid: b051a876-051c-468c-9ba3-7f7e097fcc0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: C3yqsGwboAMFx1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642c97dd-018790177515b48a7584d858;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Tue, 04 Apr 2023 21:34:21 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: Nt8kmdxRwgLObu7pxOEA4wxDD2WWQKfir_AWwMwvqTRAxg781gY4vw==
via: 1.1 c28e01aa413e9ea602538ccda1511062.cloudfront.net (CloudFront), 1.1 29a825d8a219984d47bec4350779b558.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Apr 2023 21:36:02 GMT
age: 3475
etag: "56d6b25f47f0871ed51b3c7f5d93ba6a9142474c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F013a5f10-c83e-4b37-9cf2-98dd8c6317c7.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F013a5f10-c83e-4b37-9cf2-98dd8c6317c7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 89523b8cda53b2230c5a6e0cfcd79402
8c3455bfc9934d5b99409d66584aa754afa56d5c
3e7da761fb47567dc9982b66915a28cee5a3dbff90c00fe896ff5bf9e9053e88
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F013a5f10-c83e-4b37-9cf2-98dd8c6317c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8863
x-amzn-requestid: b09e3361-314a-42a3-bf87-7eeac8c12679
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: C3yqqGv8oAMFh3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642c97dd-73e54dea627436a511a7262c;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Tue, 04 Apr 2023 21:34:21 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 4nPdAJLnKUUXM_l0YqmhW_wmhWDxxWryx2i80l6qq5Uk_2JPL0XNcA==
via: 1.1 f3802d173009698413044360f84de06c.cloudfront.net (CloudFront), 1.1 6bdc2963c9ed59b475ec36c35e5932a4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Apr 2023 21:39:18 GMT
age: 3279
etag: "8c3455bfc9934d5b99409d66584aa754afa56d5c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd83b1ff-cffc-4bc4-bd3c-bc6bee996f8d.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd83b1ff-cffc-4bc4-bd3c-bc6bee996f8d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d37a005990b494f2fbb22b15e95355aa
6dd60d490f5ee8b5f9c8aaeeca5a7a9b7b6a3a4a
89fb008ff33bc826389dab4b4ae6e54f24800102e5ab4993d541ac1a9d2f91b8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd83b1ff-cffc-4bc4-bd3c-bc6bee996f8d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8166
x-amzn-requestid: c20672fe-1108-40c6-af1f-8c63f2524380
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Cr60YHdWIAMFVSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6427d81b-7b7c250f5c9862e42bb65d0d;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Sat, 01 Apr 2023 07:07:07 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 0JOT4HqAs3-jE9Ab_IYNG52lR4sTPDa7u1T8pF-mzBVJI6GOa0Y5XA==
via: 1.1 185f4b03b711932fc7e735c08fdc5abe.cloudfront.net (CloudFront), 1.1 1570d93226c1bbca2ebaad510cff3e0c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Apr 2023 22:12:55 GMT
age: 1262
etag: "6dd60d490f5ee8b5f9c8aaeeca5a7a9b7b6a3a4a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77527c77-7214-4edc-ac50-c610366aefd6.jpeg
34.120.237.76200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77527c77-7214-4edc-ac50-c610366aefd6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0c14dd9bfa7f1f37c711973900dbb5af
c8dea8f9cafcf7d108c93156f40537e78f7da88f
b99050909eb528f9c22201ed2f0f185edbb1f0b1e16631ef21dca72433e1e05d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77527c77-7214-4edc-ac50-c610366aefd6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3500
x-amzn-requestid: 5626e00a-90a4-42c5-bcbd-1ec24decfa47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: C3yqqG0_oAMFTcQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642c97dd-16eb602d2ac30b2521cc8165;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Tue, 04 Apr 2023 21:34:21 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: Q-yoSHYZcCHlnNSX3Gyzw6wLmH6Mr2z9WR39wfa8lgEVJhh5rPE6_A==
via: 1.1 773bf3616e85ce2b187fa78710a6beb2.cloudfront.net (CloudFront), 1.1 ef8f66c83aecd87910ce2e1153544a20.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Apr 2023 21:35:57 GMT
age: 3480
etag: "c8dea8f9cafcf7d108c93156f40537e78f7da88f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59d6989a-36a1-4ed7-9694-00dfbfc9b386.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59d6989a-36a1-4ed7-9694-00dfbfc9b386.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6d504943bc15b039b6813b2d1a8a8783
865a647f277bf9234adce200cb6c3e0735f2c9e7
5906ddbaf547fcc998dc1121a1e345b34f575ffe867e32453121354f91df7d53
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59d6989a-36a1-4ed7-9694-00dfbfc9b386.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4774
x-amzn-requestid: 8c43d597-5000-48a3-be58-7157558d119e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CvNtSGTqoAMF-Aw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64292987-66a228e347e1fd032c920287;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Sun, 02 Apr 2023 07:06:47 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: eMj9Fv9kO_r5yNKqjA2px4vX6UgpDNgP0GmtAz-g5dBikHR2dhikEA==
via: 1.1 6af36c6902a46beec743522a9bbb3ab0.cloudfront.net (CloudFront), 1.1 c9b161639a9353c2354b895548ea9fca.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Apr 2023 07:50:08 GMT
age: 53029
etag: "865a647f277bf9234adce200cb6c3e0735f2c9e7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
blob.contato.io/machine-files/amodels/webflow.js
188.114.97.1200 OK 0 B URL HTTP/2 blob.contato.io/machine-files/amodels/webflow.js
IP 188.114.97.1:0
GET /machine-files/amodels/webflow.js HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Apr 2023 22:33:55 GMT
content-type: application/javascript
content-md5: 8ojJQjWogAVDId5h3RqYTw==
last-modified: Tue, 11 Dec 2018 19:34:04 GMT
x-ms-request-id: c376f77a-c01e-0028-6c06-5ed17f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: HIT
age: 1450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ooquEtieRgARiXVj4FgkEZn8ituI2XF0BB9zoNeXq1%2F09CyhVdZe6Gakb%2B72%2BQotoEDL1HlVyoizuRzGNZFcr91eFLfxMyUYDqZr1pyVznMG9wduQdrGfEmcEdS3VKm%2Fa4w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b2d040a4d16b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blob.contato.io/machine-files/builder/allpages.builder.css
188.114.97.1200 OK 0 B URL HTTP/2 blob.contato.io/machine-files/builder/allpages.builder.css
IP 188.114.97.1:0
GET /machine-files/builder/allpages.builder.css HTTP/1.1
Host: blob.contato.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://gbste-372098376209834.pagina.group/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Apr 2023 22:33:56 GMT
content-type: text/css
content-md5: XyTqW8HhCCJvbF7ufs+/zA==
last-modified: Thu, 11 Feb 2021 22:04:34 GMT
x-ms-request-id: bac386ae-801e-000d-341b-5e49cc000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=laRlRHT3IK9vTYcd2HtcfNOrLmw42g0N7cSzqWPHLT2hWp1kciadkw%2BbU8%2FIoFMObmIHcf0EVnqKDOmeamo8z%2Fdbhm3z%2FCbOEvLfaLLNBJ9XOB0CbFI48sPl9Tb3ZAEsFEM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b2d040a3d00b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2