Overview

URLjoseantoniorosso.com.br/main.exe
IP 200.160.2.95 (Brazil)
ASN#22548 Nucleo de Inf. e Coord. do Ponto BR - NIC.
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-03-19 07:46:38 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (13)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2023-03-19 04:09:09 UTC 23.36.76.226
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-03-19 04:09:35 UTC 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-03-19 04:09:04 UTC 34.160.144.191
allmedici.com.br (27) 0 2019-05-30 19:33:18 UTC 2023-02-15 10:34:18 UTC 45.151.121.60 Unknown ranking
fonts.gstatic.com (2) 0 2014-04-02 10:51:04 UTC 2023-03-19 04:16:47 UTC 216.58.207.227 Domain (gstatic.com) ranked at: 540
fonts.googleapis.com (1) 8877 2012-05-23 12:41:44 UTC 2023-03-19 04:18:01 UTC 142.250.74.106
joseantoniorosso.com.br (1) 0 2020-08-08 13:04:44 UTC 2023-02-25 23:53:26 UTC 200.160.2.95 Unknown ranking
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-03-19 04:11:12 UTC 34.117.237.239
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-03-19 04:09:19 UTC 35.155.161.242
ocsp.pki.goog (7) 175 2017-06-14 07:23:31 UTC 2023-03-19 04:10:45 UTC 142.250.74.131
www.google.com (1) 7 2012-11-08 00:08:21 UTC 2023-03-19 04:19:02 UTC 142.250.74.164
img-getpocket.cdn.mozilla.net (7) 1631 2017-09-01 03:40:57 UTC 2023-03-19 04:09:09 UTC 34.120.237.76
www.gstatic.com (1) 0 2012-05-29 15:36:17 UTC 2023-03-19 04:25:21 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-03-19 2 joseantoniorosso.com.br/main.exe Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 200.160.2.95
Date UQ / IDS / BL URL IP
2023-03-20 09:00:27 +0000 0 - 0 - 1 cortinasportoalegre.com.br/asb.co.nz/Tax-cust (...) 200.160.2.95
2023-03-19 07:46:38 +0000 0 - 0 - 1 joseantoniorosso.com.br/main.exe 200.160.2.95
2023-02-27 05:59:30 +0000 0 - 0 - 1 atr.com.br/dati/Istruzione.zip?PDF.Download_t (...) 200.160.2.95
2023-02-15 10:34:17 +0000 0 - 0 - 1 joseantoniorosso.com.br/main.exe 200.160.2.95
2023-02-09 13:05:27 +0000 0 - 0 - 1 vidativatriclub.com.br/wp-content/prong/compt (...) 200.160.2.95


Last 5 reports on ASN: Nucleo de Inf. e Coord. do Ponto BR - NIC.
Date UQ / IDS / BL URL IP
2023-03-20 09:00:27 +0000 0 - 0 - 1 cortinasportoalegre.com.br/asb.co.nz/Tax-cust (...) 200.160.2.95
2023-03-19 07:46:38 +0000 0 - 0 - 1 joseantoniorosso.com.br/main.exe 200.160.2.95
2023-02-27 05:59:30 +0000 0 - 0 - 1 atr.com.br/dati/Istruzione.zip?PDF.Download_t (...) 200.160.2.95
2023-02-15 10:34:17 +0000 0 - 0 - 1 joseantoniorosso.com.br/main.exe 200.160.2.95
2023-02-09 13:05:27 +0000 0 - 0 - 1 vidativatriclub.com.br/wp-content/prong/compt (...) 200.160.2.95


Last 3 reports on domain: joseantoniorosso.com.br
Date UQ / IDS / BL URL IP
2023-03-19 07:46:38 +0000 0 - 0 - 1 joseantoniorosso.com.br/main.exe 200.160.2.95
2023-02-15 10:34:17 +0000 0 - 0 - 1 joseantoniorosso.com.br/main.exe 200.160.2.95
2023-01-14 13:38:02 +0000 0 - 0 - 1 joseantoniorosso.com.br/main.exe 200.160.2.95


Last 2 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-02-15 10:34:17 +0000 0 - 0 - 1 joseantoniorosso.com.br/main.exe 200.160.2.95
2023-01-14 13:38:02 +0000 0 - 0 - 1 joseantoniorosso.com.br/main.exe 200.160.2.95

JavaScript

Executed Scripts (15)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (59)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD8ABB8F420D1E31462FCA1D6A7CAADF1E2BBA6FC7DB05684B5811E00E84107F"
Last-Modified: Fri, 17 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4678
Expires: Sun, 19 Mar 2023 09:04:24 GMT
Date: Sun, 19 Mar 2023 07:46:26 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0BC80613F3D493EA081BF5672AB76F6F33A1DCC0710FE1431DE83C46D7E8D31D"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11114
Expires: Sun, 19 Mar 2023 10:51:40 GMT
Date: Sun, 19 Mar 2023 07:46:26 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD775C38C2E11F1BAEDDE5D92AB17CEAF4C2067F8EA996595A66801758A71813"
Last-Modified: Fri, 17 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5136
Expires: Sun, 19 Mar 2023 09:12:02 GMT
Date: Sun, 19 Mar 2023 07:46:26 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 19 Mar 2023 07:27:02 GMT
age: 1164
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    29fdbcd53b5646cfcdd46510063734c4
Sha1:   85e3ceda5ef130219f4fe8a31e52e2690c8f7d8e
Sha256: 24c27586332c016685e6231fec5836e921048d8aaefbcd4cd6f88969f9d91e18
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: lbzbhtaxFbuoQ51Flw6CWTD1k7U1iLNaazwR9tX4eBjSXgqH7L1v8MsMA/TuZk15fMlXvn4Wzho=
x-amz-request-id: FZQB30JYABJR2T59
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 19 Mar 2023 06:52:16 GMT
age: 3250
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e7bace7c1e04d44012e37ddffe36e5d5
Sha1:   3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
                                        
                                            GET /main.exe HTTP/1.1 
Host: joseantoniorosso.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         200.160.2.95
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: max-age=300
Location: https://allmedici.com.br
Date: Sun, 19 Mar 2023 07:46:26 GMT
Content-Length: 47


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   47
Md5:    fafdd44299d54068a89fa5f4d13eaa47
Sha1:   57728760f2e512ab392a409ffc3815e8023ef5a8
Sha256: 256b52f1ebdb5dc54fbc3e535ff106fc236b008f75b0619ca8aebe76e3df3491

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 19 Mar 2023 07:46:26 GMT
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 19 Mar 2023 07:17:21 GMT
age: 1746
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5DB17BB0A40658845E03D8237A69458A0576D955006EE224930B0310179AF9AF"
Last-Modified: Fri, 17 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4731
Expires: Sun, 19 Mar 2023 09:05:18 GMT
Date: Sun, 19 Mar 2023 07:46:27 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Y+kfb0Dn4Lpn0Js+/xsCfg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.155.161.242
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: J105dwnS4EFzRclHjE3ku+jziGg=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:46:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:46:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/api.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Sun, 19 Mar 2023 07:46:27 GMT
date: Sun, 19 Mar 2023 07:46:27 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 554
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (850), with no line terminators
Size:   554
Md5:    7a61332e081c1df94aee6da79ccab5cf
Sha1:   9a1b52aef388542cfa62d685399669420b8998ee
Sha256: 3edecdbe2c8dbe6ff85c45d382f9f608ed30a6618fa62b18282e03d866dc6dd7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:46:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:46:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /assets/frontend/default/vendor/jquery/jquery.min.js HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:51 GMT
etag: "15283-60d3cbe7-bf1608379cfe52e0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 29263
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32058)
Size:   29263
Md5:    db5323f988857ee1cb0563c8a39e2511
Sha1:   22a09c4d88abd32300a2129211bc1793eb93738d
Sha256: 542378fce505aa85ccb99cd7990bfaaadcbecb4097146c570a92e93d1238225d
                                        
                                            GET /assets/frontend/default/vendor/pace/js/pace.min.js HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:51 GMT
etag: "304c-60d3cbe7-148c72741634578b;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4047
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (12345), with CRLF line terminators
Size:   4047
Md5:    8231fa526622b552c3ce74f12fc98aa6
Sha1:   e97a5e27cd053c0b46619589786e7435d852deb1
Sha256: 5d58116ba50184f63e92516f26801281e80dedefc638018c9de747a34ce8c6b3
                                        
                                            GET /assets/frontend/default/vendor/pace/css/pace-minimal.css HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:51 GMT
etag: "16e-60d3cbe7-b473e0c0fc8bcf8b;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 144
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   144
Md5:    15cb75bd4a5adf6a6226dad29bbbb843
Sha1:   649d69c2e62a9fba3ef52c8c74d45be94dc6674f
Sha256: c20acce2b69272c982094c2bde3b3f56dd7b0f62a18558884c1f36dbe0827e0b
                                        
                                            GET /assets/frontend/default/vendor/bootstrap/css/bootstrap.min.css HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "1e822-60d3cbe6-9518daf2f78f4350;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 16419
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65320)
Size:   16419
Md5:    93316774c33e12392e073527a3fe0ec3
Sha1:   9492d824f4fe47b5461480d6b573c0e984aac204
Sha256: a98a66245b890ca130caec793f5ef4affd387c8becbcdb3f8863cc6cd6f4175e
                                        
                                            GET /assets/frontend/default/vendor/swiper/css/swiper.min.css HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:51 GMT
etag: "4562-60d3cbe7-7b82a047e5614238;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2606
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17459)
Size:   2606
Md5:    3bab464e6e118b61ed71f313fb27007e
Sha1:   cb6b1afa3b4547e16838ebb42128f85db4934970
Sha256: cc536a29f2dcecfb0ea6f241189eca9b0fc9aa03878a1b2c34e29f08c5feb74e
                                        
                                            GET /assets/frontend/default/vendor/hamburgers/hamburgers.min.css HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:51 GMT
etag: "569c-60d3cbe7-1dd01ba3904e4296;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2070
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21991)
Size:   2070
Md5:    30444409b30b2b0237ae8c71dd74cf9a
Sha1:   6b60a373e48b79128948b9cb235913e3c8e1a1c6
Sha256: fabb7fbf11ce10603702f738db7d8efc5a55c8659ad54a23fbafa0180ed91212
                                        
                                            GET /assets/frontend/default/vendor/animate/animate.min.css HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "d7b6-60d3cbe6-d7aa9575afb7dade;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3541
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (55061)
Size:   3541
Md5:    82b8dd151707754b565a48b6bf638282
Sha1:   10e335ac21f20a39761336238ea8145720606faf
Sha256: be4916347ab2c8c809282d9656d21af295540effe66a2a067292e1cbe1094f76
                                        
                                            GET /assets/common/izitoast/css/iziToast.min.css HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "9e3c-60d3cbe6-c82737e79afea8d1;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 9765
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (40427)
Size:   9765
Md5:    3dfdc9f5284a129030936490e6ba159b
Sha1:   8aac8a163904e34b70850dcd4bb2ff99afd434b6
Sha256: 23471d9b4b7881ba1402297ca11484713eebbecb7d6bc47d1b16c9d698c2e9ff
                                        
                                            GET /assets/frontend/default/fonts/font-awesome/css/font-awesome.min.css HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "7918-60d3cbe6-541456336984f9e6;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6628
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837)
Size:   6628
Md5:    b8c655d76feed5e34fcacac29f060170
Sha1:   41590916c5f2bbd8354d5002171bc2bc0a2c5cee
Sha256: a8825f3d29353514ef7f5c8e5bcf286ae4df70e248fcedc02e4e184cc6c64650
                                        
                                            GET /assets/frontend/default/fonts/ionicons/css/ionicons.min.css HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "c854-60d3cbe6-2a4809c4e17942a8;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7525
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (50806)
Size:   7525
Md5:    d8a41848a091740b9ac0522de4eb1c59
Sha1:   9255f43800eb8e9dabf89d86843407bb5b261431
Sha256: c88a28910b9f0b710028c477bf87129ecbd3f31346d7c9d224cbcbbad517fab9
                                        
                                            GET /assets/frontend/default/fonts/line-icons-pro/line-icons-pro.css HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "24567-60d3cbe6-9a9006a5b69720c3;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12914
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   12914
Md5:    99407f5687d71a8df90ea3f0934a58fc
Sha1:   1e333cb81589fc3da5a96d2ea2dae39c4d643c2d
Sha256: dc1c7d035897879c48a8535f597eb3bfe588512e20aa0b14e66453eb4c53e3d5
                                        
                                            GET /assets/frontend/default/css/custom-style.css HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "1c08-60d3cbe6-1eff646e977e7d98;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1474
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1474
Md5:    a629961fd166a7afa98ba44a990948c3
Sha1:   b479b9ac5065f8cfd306a670495eea9b029624ba
Sha256: 245e870ee859c4f08cc02d0f368e9dc4569ad0dde7f8673461a797ecf6c75048
                                        
                                            GET /assets/frontend/default/vendor/popper/popper.min.js HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:51 GMT
etag: "4a59-60d3cbe7-4c636113acaa87dc;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6546
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18860)
Size:   6546
Md5:    8270b8fdfd16d0fe6a4247823c43f1f7
Sha1:   51dee77a818e4c15bbb27a7f4e74598478e62ba2
Sha256: 7762a3583ac5449c8aa84fa1d3f91d8d6f7571638f61ac5c8a51f025c2bb90c1
                                        
                                            GET /assets/frontend/default/vendor/bootstrap/js/bootstrap.min.js HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "c7c7-60d3cbe6-8fdcfd974f2f8799;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12272
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (50904)
Size:   12272
Md5:    ff4f6e9df8a62c33e0804962e586c84b
Sha1:   c5c1ff937a4f19c1aea686309532bdbc5a12fa93
Sha256: 4ff49e9ca021d9808c91173db72a3e47445e9642b87ee1fc90018139b5bca989
                                        
                                            GET /assets/frontend/default/js/vendor/jquery.easing.js HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "15e7-60d3cbe6-b1276182619dc319;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1801
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (3601), with CRLF line terminators
Size:   1801
Md5:    cf2f6c38d8fbed821eb5a4c903e87fc7
Sha1:   c52c43c646a07ec5ba70b2d1362cad28f379df75
Sha256: 14d440436b336217d24f4b745ee3533c2fc06c4575076b248a50668c433e49c8
                                        
                                            GET /assets/frontend/default/js/ie10-viewport-bug-workaround.js HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "2b4-60d3cbe6-3baa10aecfd9f125;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 336
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   336
Md5:    211398cf75d17551143338b87a5801ac
Sha1:   e43d9c70163bb1e5a50c003b49350bb4582a3744
Sha256: 7b7be5ff3fd2cfd33a9e8a005c21bdbf6a62ae82912b882c43c0b34a99509536
                                        
                                            GET /assets/frontend/default/js/slidebar/slidebar.js HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "ed1-60d3cbe6-a2a2a8ce301e4a50;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1997
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2051)
Size:   1997
Md5:    8e0df2534b2876680a68e735f8dfc3b6
Sha1:   472b19e5063df0b9f2d9e0aaec281edbdc9ce487
Sha256: a06f1057cb94a35123080412f199f9dd4289443bce5c5be1cff11638faa63432
                                        
                                            GET /assets/frontend/default/js/classie.js HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "72b-60d3cbe6-d12ec86231aed5e4;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 615
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   615
Md5:    b212c0da8a4d7a318e7528a5a6eef2c9
Sha1:   6480fc7634a42830241d5e389437c56df6813bfb
Sha256: 9d083e9e7536afe1859aec4f9fdbcb8ffcbb36dd89cf5fd2e07a96b801930c44
                                        
                                            GET /assets/frontend/default/vendor/bootstrap-dropdown-hover/js/bootstrap-dropdown-hover.js HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "242f-60d3cbe6-5ba6a58dcaa81fbe;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2003
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   2003
Md5:    782b4b6dedb776f675f702a22268fd95
Sha1:   84a44165c7832c5d6f14222b831ac5912c52aef1
Sha256: 01be6d218d760d047c24a4656bcda751e0ec193fd93c5c69a28631481019eacc
                                        
                                            GET /assets/frontend/default/vendor/flatpickr/flatpickr.min.js HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:51 GMT
etag: "ac13-60d3cbe7-c0a0de6857473eac;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11519
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (44013)
Size:   11519
Md5:    9240214d19f3149fc3a3be183b3ffc73
Sha1:   dc1329560f5976991782ffff390b799f2cc692e3
Sha256: b3c0fe5f12040d3de03c6771a55a055e840289b6a2d1e5a99f084fbe9fc9c959
                                        
                                            GET /assets/frontend/default/vendor/swiper/js/swiper.min.js HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:51 GMT
etag: "17a38-60d3cbe7-9b37809623b34ce5;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 22058
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32009)
Size:   22058
Md5:    c02a2c2418a787ff5a687f91a93260ec
Sha1:   ae45b170c2d2f02709c5ddeb38196d51691da450
Sha256: 543ad2c8b9320cf2a13dc740319dd6257e672c08c995c479cb97401b7b9cf27b
                                        
                                            GET /assets/common/izitoast/js/iziToast.min.js HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "3f4f-60d3cbe6-d16a2c3e8f2c1a47;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4243
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (16124)
Size:   4243
Md5:    3435b897e4a5d2697a705d48cd9f91dc
Sha1:   a08adef587d8439afd595dda52cf778c79500855
Sha256: 008ae6a84513cc58ec91f2ffb773f4a0715036c9e7db9148347d980768881593
                                        
                                            GET /assets/frontend/default/js/wpx.app.js HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "2bf0-60d3cbe6-2365a0382e8a8866;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2287
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   2287
Md5:    8b26a828b37686f3d0e48cd5de3eaa58
Sha1:   ddf212e00e92f67bf766adbf951b23f04e8ec095
Sha256: 4f9115c7e6b3f11bcd966aaf4514c17286b45e4eb171b0d738d8f113a97f5732
                                        
                                            GET /assets/frontend/default/css/global-style.css HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:50 GMT
etag: "5d710-60d3cbe6-1a0ab1b07bf84bf3;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 49433
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   49433
Md5:    2084b9c932f4c21367937500d5118d94
Sha1:   cba8695c5e408546ba5a38c3233bcc92c278f867
Sha256: 994fa7dc15e5f71bfe569f5ffc8d10c26eb61574868676ed3f87b800989a6b43
                                        
                                            GET /uploads/logo.png HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:11:57 GMT
etag: "4596-60d3cdcd-3d7d2aa0ed69c0dd;;;"
accept-ranges: bytes
content-length: 17814
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2021:06:23 21:11:27], baseline, precision 8, 150x143, components 3\012- data
Size:   17814
Md5:    64cc2be00128d3772a33ca5398af689a
Sha1:   3b412e68d62b6fd174f0604a61103a0ba59e1c6f
Sha256: 6c1c74dc0046ec447bf1ec3f48107402881c3ae79ec31d25ced2520ffcfcbe15
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4161
Expires: Sun, 19 Mar 2023 08:55:49 GMT
Date: Sun, 19 Mar 2023 07:46:28 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4161
Expires: Sun, 19 Mar 2023 08:55:49 GMT
Date: Sun, 19 Mar 2023 07:46:28 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4161
Expires: Sun, 19 Mar 2023 08:55:49 GMT
Date: Sun, 19 Mar 2023 07:46:28 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10338
x-amzn-requestid: 9f880b5b-056c-44bb-a811-36ea27c232aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvSgFGENoAMFuVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f9799-2318d444248f7610300c658f;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:37:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: K19FG80YIBs-7NnPFJQEodETe4DpifB_BA2FpyYtB0W-sXXjNlLKxw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 21618d080c6bfbcd465fc55a167a8c1a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 07:04:47 GMT
age: 2501
etag: "80519bb3726ee1f9f211344cd433cefaed3a7f2e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10338
Md5:    78453ba98b72eff3879ef163b59c86ed
Sha1:   80519bb3726ee1f9f211344cd433cefaed3a7f2e
Sha256: 61adfeff11af9583355ac7d1500e8a8d97357b2846f151f2421001994fb06655
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe42970c2-8007-4b4c-9f15-01cf4de37822.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6219
x-amzn-requestid: 61b80920-2ba3-4688-80ee-848d68031908
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BwlmnG0KoAMFd0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64101c90-17c159767df548c4672b7365;Sampled=0
x-amzn-remapped-date: Tue, 14 Mar 2023 07:04:48 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: ACswRkub0RlODaxJHJGsGkACkMQKk85qY3VxYPscNccAMYdpkQ9evA==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 9adef5b1c5fc9ca80d6f4f8d19e103a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 23:47:26 GMT
age: 28742
etag: "75dd9bdbaf7f19102036d27e69a011f4c37942a9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6219
Md5:    7e58e6553fe8e5d936a911080cec36dc
Sha1:   75dd9bdbaf7f19102036d27e69a011f4c37942a9
Sha256: 0c565b97125e28b8183baab26baf7c703e70f82fad13117c5780259e6d91a89d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffb155f3-4b60-4d8c-879f-3b7bd1c5c129.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5311
x-amzn-requestid: 3e000f36-3e2a-4008-950b-2e9f83306e51
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_w3eFmtIAMF7EA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162e95-1b9e4cc8033920ea365de22f;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:35:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: mB-sWMCTChGtVbvW4TkpKqqpSACyRLw9x32bDY3kvV3f0IrEsti9cg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 9adef5b1c5fc9ca80d6f4f8d19e103a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 21:48:16 GMT
etag: "210abec1182bb94b9d0e48827ecb8023611c4489"
age: 35892
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5311
Md5:    07289211ce045b31693c7bb59c06f338
Sha1:   210abec1182bb94b9d0e48827ecb8023611c4489
Sha256: 808b7bfa4b75cfb91e003d6375802da7d2719de29d4f64776dea57992b7632c4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F58bd5191-7eab-437d-a18c-a930f08c6cc6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7842
x-amzn-requestid: 6e6fff9e-c942-498d-b649-9f7f6d82fba6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B6lDbHn4oAMF5BA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64141baf-268367ad5333899e40d8353d;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 07:50:07 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: k1cHkKf_bxsiXniP1nGXKi6fUo9WFRCOkvu7hewwOQZdtkWnBtoktQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 22:13:50 GMT
age: 34358
etag: "4530492308074d7f4f7f888593149377e70ee561"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7842
Md5:    916a27eee94b9be1c268cd17c11c4824
Sha1:   4530492308074d7f4f7f888593149377e70ee561
Sha256: a7aeaf49047efb11e4cd8b72bd2e00b4afdfe461b5be50d88c343ffbf3d3ca45
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F834645cc-a32c-47ac-a12f-235778429d48.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7432
x-amzn-requestid: eadf4a39-81bf-4e09-b9e4-45e3c9592996
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_w2HEzSoAMFTxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162e8d-099b5c3d32d7d7300266dd95;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:35:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: geY0kRQBa0RwG_aW9n_18KoQrJNNNR3zRMKkmsA2OOXQHGkEE4N0Qw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 a06140ffee86972bad90c57fc682df36.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 22:13:23 GMT
age: 34385
etag: "f7f8151a3827455579613bf12a3e45c049fb2e33"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7432
Md5:    082117af513213d5b43e25c97b2b2ed6
Sha1:   f7f8151a3827455579613bf12a3e45c049fb2e33
Sha256: bb31257b2410493e8ab481ce3f2a3215c7ca5af9702319afbafc17b988d5bde1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8797d11-0587-421b-bfe0-8621f2e6a8be.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5417
x-amzn-requestid: 377c2c60-47d3-4b30-91be-bb249e8c4bb5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_wY4FZnIAMF50g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162dd2-7bd4ba134f3e30e245cd42b9;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:32:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: VX90uELFRDIL876EBNzljOUqcGwO2F8AUN8ejKq8ETqnEmxcyfTc3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 da4fa914888b330b3e8a08632b8e41be.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 21:46:34 GMT
age: 35994
etag: "4de17a25e8c0155e60ac08df41fcdd13f321a35f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5417
Md5:    0eda887ce6aad02ab7605ffd54b736c2
Sha1:   4de17a25e8c0155e60ac08df41fcdd13f321a35f
Sha256: d6ed571fc493fadc069b2191475face34d57823820b9e7d63d13eeeddb5ad6aa
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:46:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:46:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://allmedici.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 14 Mar 2023 04:29:09 GMT
expires: Wed, 13 Mar 2024 04:29:09 GMT
cache-control: public, max-age=31536000
age: 443839
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Size:   23580
Md5:    e1b3b5908c9cf23dfb2b9c52b9a023ab
Sha1:   fcd4136085f2a03481d9958cc6793a5ed98e714c
Sha256: 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
                                        
                                            GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://allmedici.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 12 Mar 2023 10:25:03 GMT
expires: Mon, 11 Mar 2024 10:25:03 GMT
cache-control: public, max-age=31536000
age: 595285
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Size:   23040
Md5:    de69cf9e514df447d1b0bb16f49d2457
Sha1:   2ac78601179c3a63ba3f3f3081556b12ddcaf655
Sha256: c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:46:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /uploads/frontend/welcome.png HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=604800
expires: Sun, 26 Mar 2023 07:46:27 GMT
last-modified: Thu, 24 Jun 2021 00:03:55 GMT
etag: "92724-60d3cbeb-372bae2981756283;;;"
accept-ranges: bytes
content-length: 599844
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1080 x 547, 8-bit/color RGBA, non-interlaced\012- data
Size:   599844
Md5:    76d6f0a07c1cf181140efd1aabfe52ae
Sha1:   27e97dd929a626a9846778b890a73957e4d49026
Sha256: 727a61255795abdc8c38158e48f7326b146ffe2d38b78c0d4b849cfefac8b727
                                        
                                            GET /recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://allmedici.com.br
Connection: keep-alive
Referer: https://allmedici.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 164678
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 11:44:52 GMT
expires: Thu, 14 Mar 2024 11:44:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 13 Mar 2023 02:02:14 GMT
vary: Accept-Encoding
age: 331297
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (576)
Size:   164678
Md5:    f22f07ee02fbeed3958345c90b52b818
Sha1:   2aa44ea19d580589c06c2170103b4d0505e18cdb
Sha256: dc1eadf37f70bef92766d0c316d1da7af283b84e5c309a4732d8ed35d7bbfb84
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ca6f680-5e4b-497f-aef4-6cca71cb98d5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11784
x-amzn-requestid: 29c7373c-4eb0-4374-8c4c-205285e23667
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_whwHM7oAMF_kw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162e0a-0c30752b04757beb7ea417a7;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:32:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: pPIURVGevjYlykVadfXACVKOnHw9BNb9udBL65Kl-z7I9AUWFDoOeQ==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 446e26a256db1310ae719d818e420898.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 22:14:05 GMT
age: 34350
etag: "59d56060ea97e27de572e48eb907882f5767f427"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11784
Md5:    49b71c6b1d8a81d5c9e5281eec609c25
Sha1:   59d56060ea97e27de572e48eb907882f5767f427
Sha256: d8d1aa817b12b61d85115c0020fafd2c2e02a0277417e96fb995329ea3c7f01a
                                        
                                            GET / HTTP/1.1 
Host: allmedici.com.br
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         45.151.121.60
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
x-powered-by: PHP/7.4.33
set-cookie: ci_session=80cdccddb0efc457841d5df1600fb208c00f050c; expires=Sun, 19-Mar-2023 09:46:27 GMT; Max-Age=7200; path=/; HttpOnly; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
vary: Accept-Encoding
date: Sun, 19 Mar 2023 07:46:27 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Lato:300,300i,400,400i,700,700i,900,900i HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allmedici.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 19 Mar 2023 07:46:27 GMT
date: Sun, 19 Mar 2023 07:46:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---