| newquim.com.br/ |  185.230.63.171 | 301 Moved Permanently | 0 B |
IP185.230.63.171:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: newquim.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 18 Nov 2022 21:57:10 GMT
Content-Length: 0
Connection: keep-alive
location: https://www.newquim.com.br/
strict-transport-security: max-age=3600
Age: 42700
Server-Timing: cache;desc=hit, varnish;desc=hit, dc;desc=84
X-Seen-By: qdrMdw4zrP0/E6B8JtgqKA==,sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVjII+12BNUOvw3X34fSrjio,m0j2EEknGIVUW/liY8BLLugxpzo4Lzk5UB/xu5OzG7jJftmKrOReD3ukbbas4YDo,2d58ifebGbosy5xc+FRalninb3RORPLZfX5yrbqC1RoaTj6zDQUCGTKG7l1IrVVJeTmYxEpILhjjKai/iXxacg==,2UNV7KOq4oGjA5+PKsX47L2p7YuUlwYf/q18t6XtpnFYgeUJqUXtid+86vZww+nL
Cache-Control: no-cache
X-Wix-Request-Id: 1668808630.259327793036511312
X-Content-Type-Options: nosniff
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash30c30d01178fc74ac5266ee64c3ee85b c0c2af8a864c00aa85a8775d55f85ab107150a3b c15644f69fbfeb99074c7e9711dfc9452ee164fa78eb981b6bae4fb7e3585f2a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C15644F69FBFEB99074C7E9711DFC9452EE164FA78EB981B6BAE4FB7E3585F2A"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12769
Expires: Sat, 19 Nov 2022 01:29:59 GMT
Date: Fri, 18 Nov 2022 21:57:10 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash67f53a639d57dd6237b5be86fe4f6c1b 287f09532dc331228d09c20b75f4160e91e9800a 41913a8af366685c42af59e9d8e02fccedbe68a3313d2d9fe353deb0c1019075
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3476
Cache-Control: max-age=135113
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 21:57:10 GMT
Etag: "63775eeb-1d7"
Expires: Sun, 20 Nov 2022 11:29:03 GMT
Last-Modified: Fri, 18 Nov 2022 10:31:07 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
|
|
| firefox.settings.services.mozilla.com/v1/ | 34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash567df7db606cf5d0871aa5bc9311b6da 4263faac7cbab2fcaf6661911dcad5091c06be17 e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 18 Nov 2022 21:45:03 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 727
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash3a38b6dd8a4cc335c026aebf2ed348b6 8a386e0ccb0ca4dc502746c45b2ebc3aa3f83cf8 8b4040a645cec1841a00a22765eb3a74978559daf15c54bd4b41b6b48aab7f95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B4040A645CEC1841A00A22765EB3A74978559DAF15C54BD4B41B6B48AAB7F95"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10704
Expires: Sat, 19 Nov 2022 00:55:34 GMT
Date: Fri, 18 Nov 2022 21:57:10 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: LVTtBew4VeqBNK2D83H3E+kBbJMyf/7WB6Ki1AW0WcgFiYN3/pESVrTH80nx8ezDOSX1g4JaY88=
x-amz-request-id: QXQGE772SXEAKPV6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 18 Nov 2022 21:15:45 GMT
age: 2485
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 21:57:10 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ |  104.18.32.68 | 200 OK | 472 B |
IP104.18.32.68:0
Hash537ff43d1e115d04378ab7490f93cdc4 a8873e9f3b63769b63155c7e3f8b0265e4f1246e e62699d866f79a6349e435cee572f795a2438b739e4b1a6e0b097e5a4f9c1aa1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 21:57:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 22:42:13 GMT
Expires: Wed, 23 Nov 2022 22:42:12 GMT
Etag: "a8873e9f3b63769b63155c7e3f8b0265e4f1246e"
Cache-Control: max-age=434101,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76c3f5d57e36b521-OSL
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 18 Nov 2022 21:44:49 GMT
cache-control: public,max-age=3600
age: 741
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfe40cc6ea871d80382b6082111393fbe 281f75d0a35dc8ef908bb0500e57abd86bd5388e 6d15422cdf7a6d72d06497188f27af893682314e82ac8a189a0ee2d798cb62d7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6194
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 21:57:11 GMT
Last-Modified: Fri, 18 Nov 2022 20:13:57 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
|
|
| static.parastorage.com/unpkg/react@16.14.0/umd/react.production.min.js |  151.101.85.91 | 200 OK | 4.7 kB |
URL HTTP/2static.parastorage.com/unpkg/react@16.14.0/umd/react.production.min.js IP151.101.85.91:0
File typeASCII text, with very long lines (574) Hash98af04861581703b8f33819f777e19f5 68333056e788b1276646537149661537143ddc8a 9b4dce05c51788fcb566e1b8bbfc8f9df48249035b9d2cb8633011b7bd26c5dc
GET /unpkg/react@16.14.0/umd/react.production.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-max-age: 3000
last-modified: Thu, 15 Oct 2020 02:11:22 GMT
etag: W/"63d498e143f421cc44dfb64f22fef270"
access-control-allow-methods: GET, GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciexeHcfy36aNagyZbZBL0eWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVc0g5Kz7nWLaChx0hkFXPsQ8ghGES6Jsix+7j8qfOfk1L
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1660710573.6746456715006120999
accept-ranges: bytes
date: Fri, 18 Nov 2022 21:57:11 GMT
age: 469930
x-served-by: cache-bma1628-BMA
x-cache: HIT
x-cache-hits: 10588
x-timer: S1668808631.359258,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4703
X-Firefox-Spdy: h2
|
|
| static.parastorage.com/services/wix-thunderbolt/dist/thunderbolt-commons.d679753d.bundle.min.js | 151.101.85.91 | 200 OK | 26 kB |
URL HTTP/2static.parastorage.com/services/wix-thunderbolt/dist/thunderbolt-commons.d679753d.bundle.min.js IP151.101.85.91:0
File typeASCII text, with very long lines (65536), with no line terminators Hashb4fec4cfece03dc5e95aebb251fb2c7a ad94499132aae79f3cdccf67c12d8edd97c74540 4f57e43df114093b2ca24d719d36e72792dd5a7111e258de79b4815ae27b74c5
GET /services/wix-thunderbolt/dist/thunderbolt-commons.d679753d.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Thu, 17 Nov 2022 08:56:34 GMT
etag: W/"e7f3fad7be65b009f527bb59e515b779"
x-amz-version-id: nnstLJ9lMMPAFT6xykWT6fQbwIpB65XC
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjEM4kaaS6QH/itsJwI9pla,aVxMblM8KFG3we5NLvyVcyzve4L4qo9dv8TvlcgmZhMQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1668675492.7776931215091730413
accept-ranges: bytes
date: Fri, 18 Nov 2022 21:57:11 GMT
age: 133143
x-served-by: cache-bma1647-BMA
x-cache: HIT
x-cache-hits: 3093
x-timer: S1668808631.347697,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26454
X-Firefox-Spdy: h2
|
|
| static.parastorage.com/services/wix-perf-measure/1.1042.0/wix-perf-measure.bundle.min.js | 151.101.85.91 | 200 OK | 12 kB |
URL HTTP/2static.parastorage.com/services/wix-perf-measure/1.1042.0/wix-perf-measure.bundle.min.js IP151.101.85.91:0
File typeASCII text, with very long lines (41116) Hasheff084a5748e8e0f2a7ec583b470a688 ebbf9733448bb4ce7f5666a8ab387776e721d8f0 bc5d488a06103bf405f79c3f7915e4bfd713b27c9cd9406c98e6885e4238b037
GET /services/wix-perf-measure/1.1042.0/wix-perf-measure.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 10:21:30 GMT
etag: W/"72cd3e3e90088aa5acd84acd0d7346c6"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciexeHcfy36aNagyZbZBL0eWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVc5a79avpR2DZCk9xnuoLql1jPZTuGyYqVhtmEIgJUb4w
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1663237935.0068719354608228454
accept-ranges: bytes
date: Fri, 18 Nov 2022 21:57:11 GMT
age: 5571251
x-served-by: cache-bma1647-BMA
x-cache: HIT
x-cache-hits: 10135
x-timer: S1668808631.350248,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11956
X-Firefox-Spdy: h2
|
|
| static.parastorage.com/unpkg/react-dom@16.14.0/umd/react-dom.production.min.js | 151.101.85.91 | 200 OK | 36 kB |
URL HTTP/2static.parastorage.com/unpkg/react-dom@16.14.0/umd/react-dom.production.min.js IP151.101.85.91:0
File typeASCII text, with very long lines (682) Hashc88aca3ce8fd7ec85ff55d835e476dcc 66f5f5ddcff30e3b7425ca4995c27ab19fee025f c2c5ce710d0420daa825ffff8ade4628c84ab0dad9c066d356e91c47f5dec485
GET /unpkg/react-dom@16.14.0/umd/react-dom.production.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-max-age: 3000
last-modified: Thu, 15 Oct 2020 02:11:22 GMT
etag: W/"c5abc87541fe6bb0f43f22af475a8b20"
access-control-allow-methods: GET, GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjBLy8P45DoDO4LnRm+zqsP,aVxMblM8KFG3we5NLvyVc7eNHvhCRAbD7EPjVZvQO20fbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1664850078.709982629939212470
accept-ranges: bytes
date: Fri, 18 Nov 2022 21:57:11 GMT
age: 3993861
x-served-by: cache-bma1628-BMA
x-cache: HIT
x-cache-hits: 49952
x-timer: S1668808631.359424,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 36048
X-Firefox-Spdy: h2
|
|
| static.parastorage.com/unpkg/lodash@4.17.21/lodash.min.js | 151.101.85.91 | 200 OK | 25 kB |
URL HTTP/2static.parastorage.com/unpkg/lodash@4.17.21/lodash.min.js IP151.101.85.91:0
File typeASCII text, with very long lines (4143) Hash9661f391f69ddbf1e8bbf879c1c69660 60e78567cd82d5dec158be4ae4d365f45412fb36 59fe3fa5daacb2b18c734a563d4e8e9df1f51eb24672249ca4962f3132149191
GET /unpkg/lodash@4.17.21/lodash.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Sun, 21 Feb 2021 02:37:42 GMT
etag: W/"9becc40fb1d85d21d0ca38e2f7069511"
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjMXxQm1EY0IGoQ+Aul+AXR,aVxMblM8KFG3we5NLvyVc5a79avpR2DZCk9xnuoLql1jPZTuGyYqVhtmEIgJUb4w
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1661228868.541712333382513129
accept-ranges: bytes
date: Fri, 18 Nov 2022 21:57:11 GMT
age: 7655987
x-served-by: cache-bma1647-BMA
x-cache: HIT
x-cache-hits: 11470
x-timer: S1668808631.355281,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25102
X-Firefox-Spdy: h2
|
|
| static.parastorage.com/services/tag-manager-client/1.691.0/siteTags.bundle.min.js | 151.101.85.91 | 200 OK | 3.0 kB |
URL HTTP/2static.parastorage.com/services/tag-manager-client/1.691.0/siteTags.bundle.min.js IP151.101.85.91:0
File typeASCII text, with very long lines (8011) Hashb11b4ad061761430b22094d01f9f0d51 3f89c726ff47daf4ac23e3a0006147e1cc7481b5 0dfedef80569d867529b9bb69697dd11100405586dec0206ce38d65cbdc016ec
GET /services/tag-manager-client/1.691.0/siteTags.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Nov 2022 13:14:28 GMT
etag: W/"fda8f30403139cbd1ff4385fba9af990"
x-amz-version-id: BdDjhPbFbrrwXgO8ibMNMbft7fa8_c_8
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciDgmy1x1bk0T2mMblm59aj,aVxMblM8KFG3we5NLvyVcyeTzFUhjLKPB6lD0luXXHcfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1668586528.021549322813823951
accept-ranges: bytes
date: Fri, 18 Nov 2022 21:57:11 GMT
age: 222137
x-served-by: cache-bma1647-BMA
x-cache: HIT
x-cache-hits: 5161
x-timer: S1668808631.363487,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3038
X-Firefox-Spdy: h2
|
|
| static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/open-source/opensans-regular-webfont.woff | 151.101.85.91 | 200 OK | 85 kB |
URL HTTP/2static.parastorage.com/services/third-party/fonts/user-site-fonts/fonts/open-source/opensans-regular-webfont.woff IP151.101.85.91:0
File typeWeb Open Font Format, TrueType, length 84928, version 1.0\012- data Hash55b8ce1f9a32bb0f83f14813eac0b7ca c0d0478dc16d58a02f169198d862e684a2b591eb 33637fa0826291bfe2cf8cd916c1e0e96a0e6f9f7fbb9a7e93c183e5448d1774
GET /services/third-party/fonts/user-site-fonts/fonts/open-source/opensans-regular-webfont.woff HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-font-woff
last-modified: Tue, 17 Apr 2018 11:11:05 GMT
etag: "16bf2b9a3c1d6cbc8582db67dcb66146-1"
x-amz-version-id: lbXdWSehMaKYxDRkfPaG5H9M4INGtVs6
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciDgmy1x1bk0T2mMblm59aj,aVxMblM8KFG3we5NLvyVc1XEV11U4uj6EySGMcOeW2gfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1667280100.85415850142461215896
accept-ranges: bytes
date: Fri, 18 Nov 2022 21:57:11 GMT
age: 1547622
x-served-by: cache-bma1628-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1668808631.393864,VS0,VE1
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 84928
X-Firefox-Spdy: h2
|
|
| ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3 | 104.18.20.226 | 200 OK | 1.5 kB |
URL HTTP/1.1ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3 IP104.18.20.226:0
Hash138367da7f3f58b3e61208414240e7a8 320bb95f2289e95c824e92379332aa659e26b756 aa336902d79cb61fb87fea1b7b31a4a90c95f1b1c9f51fa2f5faeb0be2458945
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 21:57:11 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "8F0BB646D69D957EEB533C08466E14E52F066227"
Expires: Sat, 19 Nov 2022 09:00:00 GMT
Last-Modified: Fri, 18 Nov 2022 21:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 92
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c3f5da68feb4ff-OSL
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 471 B |
IP104.18.32.68:0
Hashc5a49de49b4ab9ad1c53bdfbecdcf86e 23b2692c7fe18e3f632b0bd6285cb8ea690f0528 f7704a5c2fb6ff8f4ff11b2bb42faea61f08deec5624c1d6e989da9815e1d102
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 21:57:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 15 Nov 2022 20:16:27 GMT
Expires: Tue, 22 Nov 2022 20:16:26 GMT
Etag: "23b2692c7fe18e3f632b0bd6285cb8ea690f0528"
Cache-Control: max-age=338954,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76c3f5da2865b4e8-OSL
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 471 B |
IP104.18.32.68:0
Hashc5a49de49b4ab9ad1c53bdfbecdcf86e 23b2692c7fe18e3f632b0bd6285cb8ea690f0528 f7704a5c2fb6ff8f4ff11b2bb42faea61f08deec5624c1d6e989da9815e1d102
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 21:57:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 15 Nov 2022 20:16:27 GMT
Expires: Tue, 22 Nov 2022 20:16:26 GMT
Etag: "23b2692c7fe18e3f632b0bd6285cb8ea690f0528"
Cache-Control: max-age=338954,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76c3f5da3d5bb51b-OSL
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 471 B |
IP104.18.32.68:0
Hashc5a49de49b4ab9ad1c53bdfbecdcf86e 23b2692c7fe18e3f632b0bd6285cb8ea690f0528 f7704a5c2fb6ff8f4ff11b2bb42faea61f08deec5624c1d6e989da9815e1d102
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 21:57:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 15 Nov 2022 20:16:27 GMT
Expires: Tue, 22 Nov 2022 20:16:26 GMT
Etag: "23b2692c7fe18e3f632b0bd6285cb8ea690f0528"
Cache-Control: max-age=338954,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76c3f5da5bcab512-OSL
|
|
| siteassets.parastorage.com/pages/pages/thunderbolt?beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.carmi_simple_mode%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.dontOverflowHiddenSiteRoot%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fwww.newquim.com.br&fileId=74060664.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=QueryParam&metaSiteId=13207794-e0c3-6600-14ef-b9ddcba3da5b&module=thunderbolt-features&originalLanguage=en&pageId=2d0ccd_68f840dd81fe1933d9f9d8f59a611ce9_147.json&quickActionsMenuEnabled=true®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9876.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9876.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=13207794-d7dd-148a-dc2a-5ed94d54bed1&siteRevision=147&staticHTMLComponentUrl=https%3A%2F%2Fwww-newquim-com-br.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop | 151.101.85.91 | 200 OK | 3.7 kB |
URL HTTP/2siteassets.parastorage.com/pages/pages/thunderbolt?beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.carmi_simple_mode%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.dontOverflowHiddenSiteRoot%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fwww.newquim.com.br&fileId=74060664.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=QueryParam&metaSiteId=13207794-e0c3-6600-14ef-b9ddcba3da5b&module=thunderbolt-features&originalLanguage=en&pageId=2d0ccd_68f840dd81fe1933d9f9d8f59a611ce9_147.json&quickActionsMenuEnabled=true®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9876.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9876.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=13207794-d7dd-148a-dc2a-5ed94d54bed1&siteRevision=147&staticHTMLComponentUrl=https%3A%2F%2Fwww-newquim-com-br.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop IP151.101.85.91:0
File typeJSON data\012- , Unicode text, UTF-8 text, with very long lines (37942), with no line terminators Hash84704f4fe81f8ef2bb925438a9cca4fb 13eed679fd153b8972a30b9d50eeb5d68e8101c3 0ca91c2742be144d107181a0650e42b6c15b93ba3b1978080b9510a91cff4946
GET /pages/pages/thunderbolt?beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.carmi_simple_mode%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.dontOverflowHiddenSiteRoot%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fwww.newquim.com.br&fileId=74060664.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=QueryParam&metaSiteId=13207794-e0c3-6600-14ef-b9ddcba3da5b&module=thunderbolt-features&originalLanguage=en&pageId=2d0ccd_68f840dd81fe1933d9f9d8f59a611ce9_147.json&quickActionsMenuEnabled=true®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9876.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9876.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=13207794-d7dd-148a-dc2a-5ed94d54bed1&siteRevision=147&staticHTMLComponentUrl=https%3A%2F%2Fwww-newquim-com-br.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop HTTP/1.1
Host: siteassets.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
etag: W/"9882-iBjb4fFCWVQ7cLrG2+5bWTmQny8"
x-wix-request-id: 1668808631.406815078259811991
access-control-expose-headers: age,via,x-cache-status,X-cache-status
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-seen-by: 2iuX5LYwvZa9CoGaG8ZUZjb5j8fWnvnycWNmjdvR375doDcb+JuzLucmWkKUGZxh,/SoSYmefJLK2hiZpy2XaYlN1tYMUtM33SkDcJDaLDqk9ohduqgp+CiYH1GQw2S9S,ZUT6NeJ/NsDmQ9DMGnwT1JykeQlITIoZ3hptvCphI/0a0sM5c8dDUFHeNaFq0qDu
server: Pepyaka/1.19.0
cache-control: public, max-age=7776000, immutable
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
accept-ranges: bytes
date: Fri, 18 Nov 2022 21:57:11 GMT
age: 0
x-served-by: cache-bma1672-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668808631.359894,VS0,VE93
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3725
X-Firefox-Spdy: h2
|
|
| siteassets.parastorage.com/pages/pages/thunderbolt?beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.carmi_simple_mode%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.dontOverflowHiddenSiteRoot%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fwww.newquim.com.br&fileId=74060664.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=QueryParam&metaSiteId=13207794-e0c3-6600-14ef-b9ddcba3da5b&module=thunderbolt-features&originalLanguage=en&pageId=2d0ccd_ee70e41723d9c4ba1943429e201c8e9c_147.json&quickActionsMenuEnabled=true®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9876.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9876.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=13207794-d7dd-148a-dc2a-5ed94d54bed1&siteRevision=147&staticHTMLComponentUrl=https%3A%2F%2Fwww-newquim-com-br.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop | 151.101.85.91 | 200 OK | 9.7 kB |
URL HTTP/2siteassets.parastorage.com/pages/pages/thunderbolt?beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.carmi_simple_mode%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.dontOverflowHiddenSiteRoot%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fwww.newquim.com.br&fileId=74060664.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=QueryParam&metaSiteId=13207794-e0c3-6600-14ef-b9ddcba3da5b&module=thunderbolt-features&originalLanguage=en&pageId=2d0ccd_ee70e41723d9c4ba1943429e201c8e9c_147.json&quickActionsMenuEnabled=true®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9876.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9876.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=13207794-d7dd-148a-dc2a-5ed94d54bed1&siteRevision=147&staticHTMLComponentUrl=https%3A%2F%2Fwww-newquim-com-br.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop IP151.101.85.91:0
File typeJSON data\012- , Unicode text, UTF-8 text, with very long lines (58341), with no line terminators Hash1f396832b2622b36e392dff2ece315e4 9a2f7623e85f57e6b543241fea4ee3c3fcd5e71c fffa471624bde688ed652ec3c3ffeddfad801af7bc95b535f168b34790256b62
GET /pages/pages/thunderbolt?beckyExperiments=specs.thunderbolt.DatePickerPortal%3Atrue%2Cspecs.thunderbolt.new_responsive_layout_render_all_breakpoints%3Atrue%2Cspecs.thunderbolt.loadHighQualityImagesAboveFold%3Atrue%2Cspecs.thunderbolt.carmi_simple_mode%3Atrue%2Cspecs.thunderbolt.customElemCollapsedheight%3Atrue%2Cspecs.thunderbolt.new_responsive_layout%3Atrue%2Cspecs.thunderbolt.serveGoogleFontsFromWixForTPA%3Atrue%2Cspecs.thunderbolt.dontOverflowHiddenSiteRoot%3Atrue&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.1863.0&excludedSafariOrIOS=false&experiments=bv_remove_add_chat_viewer_fixer%2Cdm_migrateToTextTheme&externalBaseUrl=https%3A%2F%2Fwww.newquim.com.br&fileId=74060664.bundle.min&hasTPAWorkerOnSite=false&isHttps=true&isInSeo=false&isMultilingualEnabled=false&isPremiumDomain=true&isUrlMigrated=true&isWixCodeOnPage=false&isWixCodeOnSite=false&language=en&languageResolutionMethod=QueryParam&metaSiteId=13207794-e0c3-6600-14ef-b9ddcba3da5b&module=thunderbolt-features&originalLanguage=en&pageId=2d0ccd_ee70e41723d9c4ba1943429e201c8e9c_147.json&quickActionsMenuEnabled=true®istryLibrariesTopology=%5B%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22wixui%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9876.0%22%7D%2C%7B%22artifactId%22%3A%22editor-elements%22%2C%22namespace%22%3A%22dsgnsys%22%2C%22url%22%3A%22https%3A%2F%2Fstatic.parastorage.com%2Fservices%2Feditor-elements%2F1.9876.0%22%7D%5D&remoteWidgetStructureBuilderVersion=1.233.0&siteId=13207794-d7dd-148a-dc2a-5ed94d54bed1&siteRevision=147&staticHTMLComponentUrl=https%3A%2F%2Fwww-newquim-com-br.filesusr.com%2F&useSandboxInHTMLComp=false&viewMode=desktop HTTP/1.1
Host: siteassets.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
etag: W/"e4e1-GiPNTDW6dpSvsYB/m7JTsiNb2Rg"
x-wix-request-id: 1668808631.410815341245391991
access-control-expose-headers: age,via,x-cache-status,X-cache-status
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-seen-by: 2iuX5LYwvZa9CoGaG8ZUZjb5j8fWnvnycWNmjdvR375doDcb+JuzLucmWkKUGZxh,/SoSYmefJLK2hiZpy2XaYlN1tYMUtM33SkDcJDaLDqlPVq6j5UDaVA1cI6B3zPKF,ZUT6NeJ/NsDmQ9DMGnwT1OvWwPwld897JoUIpamXvpgQXT2AyjWfyxKagyd4/pDD
server: Pepyaka/1.19.0
cache-control: public, max-age=7776000, immutable
timing-allow-origin: *
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
accept-ranges: bytes
date: Fri, 18 Nov 2022 21:57:11 GMT
age: 0
x-served-by: cache-bma1672-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668808631.364050,VS0,VE93
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 9746
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 472 B |
IP104.18.32.68:0
Hash537ff43d1e115d04378ab7490f93cdc4 a8873e9f3b63769b63155c7e3f8b0265e4f1246e e62699d866f79a6349e435cee572f795a2438b739e4b1a6e0b097e5a4f9c1aa1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 21:57:11 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 22:42:13 GMT
Expires: Wed, 23 Nov 2022 22:42:12 GMT
Etag: "a8873e9f3b63769b63155c7e3f8b0265e4f1246e"
Cache-Control: max-age=434100,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76c3f5d98c3db521-OSL
|
|
| ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4 | 104.18.20.226 | 200 OK | 1.5 kB |
URL HTTP/1.1ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4 IP104.18.20.226:0
Hash850638e0e3ce8f6a92bdf8aa2efa73d7 09fd2232d35fc1138622eda9de443d5c32714b6f e1342476ea5bca18076f9a8634f6a67a25ff27a4544b014800b3dbda1fadb306
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 21:57:11 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "35A0BF20C12632573EC541E604618E07E73AD58F"
Expires: Sat, 19 Nov 2022 09:00:00 GMT
Last-Modified: Fri, 18 Nov 2022 21:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1220
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c3f5dac9a4b4ff-OSL
|
|
| push.services.mozilla.com/ | 44.228.207.167 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP44.228.207.167:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZXXmniDIF2yZcBNCbYQ+Dg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /lDSAFlEcpuFEZDHYoRUFqr7tVk=
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1d8279d1883bcd54eb402814bb93a622 97983e45f35a6a655e7dd29e49ed013cda149155 837f82b40df521c1000e635bacfdf623475d428078934d50199bf69bb7774170
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "837F82B40DF521C1000E635BACFDF623475D428078934D50199BF69BB7774170"
Last-Modified: Wed, 16 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10813
Expires: Sat, 19 Nov 2022 00:57:24 GMT
Date: Fri, 18 Nov 2022 21:57:11 GMT
Connection: keep-alive
|
|
| static.wixstatic.com/media/2d0ccd_c0662ee21fa9c0bb971c9776c5b2cabb.png/v1/fill/w_140,h_140,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/2d0ccd_c0662ee21fa9c0bb971c9776c5b2cabb.png | 34.102.176.152 | 200 OK | 28 kB |
URL HTTP/2static.wixstatic.com/media/2d0ccd_c0662ee21fa9c0bb971c9776c5b2cabb.png/v1/fill/w_140,h_140,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/2d0ccd_c0662ee21fa9c0bb971c9776c5b2cabb.png IP34.102.176.152:0
File typeRIFF (little-endian) data, Web/P image\012- data Hasha09776454cfc5eeb672d7e96428601be 0610701cc5d13afd1e3907bf73fff2843fa2bfca e2ca40c1412f429713a972994c5983196f03ba935ae864d6305a9752e6cacc51
GET /media/2d0ccd_c0662ee21fa9c0bb971c9776c5b2cabb.png/v1/fill/w_140,h_140,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/2d0ccd_c0662ee21fa9c0bb971c9776c5b2cabb.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Fri, 18 Nov 2022 21:57:11 GMT
content-type: image/webp
content-length: 28386
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Hjq2KOroDhQRDtDgj6dGejHjdb
x-seen-by: image-manipulator-77c4b7b444-dl4pg
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=miss,miss&dc=84µPop=eun1_g&et=1&event_name=Init&is_cached=false&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&ita=1&msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&pn=1&sessionId=03c84107-cd67-499a-950a-673d8dfec274&siterev=147-__siteCacheRevision__&st=2&ts=51&tts=1099&url=https%3A%2F%2Fwww.newquim.com.br%2F%3F&v=1.11257.0&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&_brandId=wix | 34.231.124.230 | 204 No Content | 0 B |
URL HTTP/2frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=miss,miss&dc=84µPop=eun1_g&et=1&event_name=Init&is_cached=false&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&ita=1&msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&pn=1&sessionId=03c84107-cd67-499a-950a-673d8dfec274&siterev=147-__siteCacheRevision__&st=2&ts=51&tts=1099&url=https%3A%2F%2Fwww.newquim.com.br%2F%3F&v=1.11257.0&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&_brandId=wix IP34.231.124.230:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bt?src=29&evid=3&viewer_name=thunderbolt&caching=miss,miss&dc=84µPop=eun1_g&et=1&event_name=Init&is_cached=false&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&ita=1&msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&pn=1&sessionId=03c84107-cd67-499a-950a-673d8dfec274&siterev=147-__siteCacheRevision__&st=2&ts=51&tts=1099&url=https%3A%2F%2Fwww.newquim.com.br%2F%3F&v=1.11257.0&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&_brandId=wix HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
date: Fri, 18 Nov 2022 21:57:11 GMT
server: nginx
access-control-allow-origin: https://www.newquim.com.br
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
|
|
| static.parastorage.com/services/wix-thunderbolt/dist/thunderbolt-components-registry.880adca6.chunk.min.js | 151.101.85.91 | 200 OK | 9.0 kB |
URL HTTP/2static.parastorage.com/services/wix-thunderbolt/dist/thunderbolt-components-registry.880adca6.chunk.min.js IP151.101.85.91:0
File typeASCII text, with very long lines (30178) Hash2df11869d86b66ba254f5599c85354f5 42e7c9cb69de186756475a7572785965b36db287 9d2633e49806c321e6e03a7cec97690e2e04580ba3aaab836e13f60feebca92a
GET /services/wix-thunderbolt/dist/thunderbolt-components-registry.880adca6.chunk.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Thu, 17 Nov 2022 08:15:01 GMT
etag: W/"c4ab86acaf700a42f38451eeeee5a676"
x-amz-version-id: OuRo0OCQBENtjiojZ_zoxthGXEv6eG1U
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: MISS
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjEM4kaaS6QH/itsJwI9pla,aVxMblM8KFG3we5NLvyVcwnP9a1Ia0LRvqhhntyPznoQXT2AyjWfyxKagyd4/pDD,2iuX5LYwvZa9CoGaG8ZUZgqsM72LknxyIGq7MjJjVJPCifhrzEvF3Uo1RRJ0RM54
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1668672955.9146902813376630413
accept-ranges: bytes
date: Fri, 18 Nov 2022 21:57:11 GMT
age: 135676
x-served-by: cache-bma1628-BMA
x-cache: HIT
x-cache-hits: 2805
x-timer: S1668808632.682513,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 8959
X-Firefox-Spdy: h2
|
|
| frog.wix.com/bolt-performance?src=72&evid=21&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=84µPop=eun1_g&is_cached=false&msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&session_id=03c84107-cd67-499a-950a-673d8dfec274&ish=false&isb=false&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&caching=miss,miss&pv=visible&pn=1&v=1.11257.0&url=https%3A%2F%2Fwww.newquim.com.br%2F&st=2&ts=41&tsn=1090 | 34.231.124.230 | 204 No Content | 0 B |
URL HTTP/2frog.wix.com/bolt-performance?src=72&evid=21&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=84µPop=eun1_g&is_cached=false&msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&session_id=03c84107-cd67-499a-950a-673d8dfec274&ish=false&isb=false&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&caching=miss,miss&pv=visible&pn=1&v=1.11257.0&url=https%3A%2F%2Fwww.newquim.com.br%2F&st=2&ts=41&tsn=1090 IP34.231.124.230:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance?src=72&evid=21&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=84µPop=eun1_g&is_cached=false&msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&session_id=03c84107-cd67-499a-950a-673d8dfec274&ish=false&isb=false&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&caching=miss,miss&pv=visible&pn=1&v=1.11257.0&url=https%3A%2F%2Fwww.newquim.com.br%2F&st=2&ts=41&tsn=1090 HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
date: Fri, 18 Nov 2022 21:57:11 GMT
server: nginx
access-control-allow-origin: https://www.newquim.com.br
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
|
|
| static.wixstatic.com/media/2d0ccd_cbde7a3f8cbb3131e5a8df2c3b35e00c.png/v1/fill/w_344,h_200,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/2d0ccd_cbde7a3f8cbb3131e5a8df2c3b35e00c.png | 34.102.176.152 | 200 OK | 25 kB |
URL HTTP/2static.wixstatic.com/media/2d0ccd_cbde7a3f8cbb3131e5a8df2c3b35e00c.png/v1/fill/w_344,h_200,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/2d0ccd_cbde7a3f8cbb3131e5a8df2c3b35e00c.png IP34.102.176.152:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash44664bc1b9846a81a2096a47c50b25ee dd52abe42165c69f3bbe1522ea941f113a2c1459 f62819881b15b00242dcb8e751ad634fdaf60fb99c186cf0e3cbd839f86b09d1
GET /media/2d0ccd_cbde7a3f8cbb3131e5a8df2c3b35e00c.png/v1/fill/w_344,h_200,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/2d0ccd_cbde7a3f8cbb3131e5a8df2c3b35e00c.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Fri, 18 Nov 2022 21:57:11 GMT
content-type: image/webp
content-length: 25148
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Hjq2FAQjTrRe6vrypqptIq2E74
x-seen-by: image-manipulator-77c4b7b444-mrlr7
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| static.wixstatic.com/media/2d0ccd_3afc42ad5e8f5c00809479c736ca667a.jpg/v1/fill/w_556,h_268,al_c,lg_1,q_80,enc_auto/2d0ccd_3afc42ad5e8f5c00809479c736ca667a.jpg | 34.102.176.152 | 200 OK | 12 kB |
URL HTTP/2static.wixstatic.com/media/2d0ccd_3afc42ad5e8f5c00809479c736ca667a.jpg/v1/fill/w_556,h_268,al_c,lg_1,q_80,enc_auto/2d0ccd_3afc42ad5e8f5c00809479c736ca667a.jpg IP34.102.176.152:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashedd03f62473110b15ee313493f61342c 33a230cd2f96c79f7e424c197945773db7e45fdf 6d5656f9475e8773548da2691cab823e5a112233553f7f78db02a0d4b4de429d
GET /media/2d0ccd_3afc42ad5e8f5c00809479c736ca667a.jpg/v1/fill/w_556,h_268,al_c,lg_1,q_80,enc_auto/2d0ccd_3afc42ad5e8f5c00809479c736ca667a.jpg HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Fri, 18 Nov 2022 21:57:11 GMT
content-type: image/webp
content-length: 12150
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Hjq2JNzrpwf8iBiq18PaUhsy8R
x-seen-by: image-manipulator-77c4b7b444-84v4z
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=miss,miss&dc=84µPop=eun1_g&et=12&event_name=Partially%20visible&is_cached=false&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&pid=mainPage&pn=1&sessionId=03c84107-cd67-499a-950a-673d8dfec274&siterev=147-__siteCacheRevision__&st=2&ts=127&tts=1177&url=https%3A%2F%2Fwww.newquim.com.br%2F%3F&v=1.11257.0&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&_brandId=wix | 34.231.124.230 | 204 No Content | 0 B |
URL HTTP/2frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=miss,miss&dc=84µPop=eun1_g&et=12&event_name=Partially%20visible&is_cached=false&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&pid=mainPage&pn=1&sessionId=03c84107-cd67-499a-950a-673d8dfec274&siterev=147-__siteCacheRevision__&st=2&ts=127&tts=1177&url=https%3A%2F%2Fwww.newquim.com.br%2F%3F&v=1.11257.0&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&_brandId=wix IP34.231.124.230:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bt?src=29&evid=3&viewer_name=thunderbolt&caching=miss,miss&dc=84µPop=eun1_g&et=12&event_name=Partially%20visible&is_cached=false&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&pid=mainPage&pn=1&sessionId=03c84107-cd67-499a-950a-673d8dfec274&siterev=147-__siteCacheRevision__&st=2&ts=127&tts=1177&url=https%3A%2F%2Fwww.newquim.com.br%2F%3F&v=1.11257.0&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&_brandId=wix HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
date: Fri, 18 Nov 2022 21:57:11 GMT
server: nginx
access-control-allow-origin: https://www.newquim.com.br
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
|
|
| static.wixstatic.com/media/2d0ccd_b3549c85f6dd28315354021ce6c9c70a.jpg/v1/fill/w_940,h_453,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/2d0ccd_b3549c85f6dd28315354021ce6c9c70a.jpg | 34.102.176.152 | 200 OK | 18 kB |
URL HTTP/2static.wixstatic.com/media/2d0ccd_b3549c85f6dd28315354021ce6c9c70a.jpg/v1/fill/w_940,h_453,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/2d0ccd_b3549c85f6dd28315354021ce6c9c70a.jpg IP34.102.176.152:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashc2f32b7d04c2f122f2f1cf4af017571d 6512265a749ef3224d542d4af7058b000f175303 ba19a193399639bb75d16c4ee7818443567db58cd8dd2e0fa9cdb402d6049aad
GET /media/2d0ccd_b3549c85f6dd28315354021ce6c9c70a.jpg/v1/fill/w_940,h_453,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/2d0ccd_b3549c85f6dd28315354021ce6c9c70a.jpg HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Fri, 18 Nov 2022 21:57:11 GMT
content-type: image/webp
content-length: 17482
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Hjq2KYQEUXHhsZT7jYTLYEDzIs
x-seen-by: image-manipulator-77c4b7b444-ngl4w
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| frog.wix.com/bolt-performance?src=72&evid=28&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=84µPop=eun1_g&is_cached=false&msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&session_id=03c84107-cd67-499a-950a-673d8dfec274&ish=false&isb=false&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&caching=miss,miss&pv=visible&pn=1&v=1.11257.0&url=https%3A%2F%2Fwww.newquim.com.br%2F&st=2&ts=41&tsn=1090&name=partially_visible&duration=1668808629434&pageId=mainPage | 34.231.124.230 | 204 No Content | 0 B |
URL HTTP/2frog.wix.com/bolt-performance?src=72&evid=28&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=84µPop=eun1_g&is_cached=false&msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&session_id=03c84107-cd67-499a-950a-673d8dfec274&ish=false&isb=false&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&caching=miss,miss&pv=visible&pn=1&v=1.11257.0&url=https%3A%2F%2Fwww.newquim.com.br%2F&st=2&ts=41&tsn=1090&name=partially_visible&duration=1668808629434&pageId=mainPage IP34.231.124.230:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bolt-performance?src=72&evid=28&appName=thunderbolt&is_rollout=0&is_sav_rollout=0&is_dac_rollout=0&dc=84µPop=eun1_g&is_cached=false&msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&session_id=03c84107-cd67-499a-950a-673d8dfec274&ish=false&isb=false&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&caching=miss,miss&pv=visible&pn=1&v=1.11257.0&url=https%3A%2F%2Fwww.newquim.com.br%2F&st=2&ts=41&tsn=1090&name=partially_visible&duration=1668808629434&pageId=mainPage HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
date: Fri, 18 Nov 2022 21:57:11 GMT
server: nginx
access-control-allow-origin: https://www.newquim.com.br
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
|
|
| static.wixstatic.com/media/2d0ccd_cc3bfe3bdae89a91ce140e0ba2c8d835.jpg/v1/fill/w_940,h_453,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/2d0ccd_cc3bfe3bdae89a91ce140e0ba2c8d835.jpg | 34.102.176.152 | 200 OK | 52 kB |
URL HTTP/2static.wixstatic.com/media/2d0ccd_cc3bfe3bdae89a91ce140e0ba2c8d835.jpg/v1/fill/w_940,h_453,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/2d0ccd_cc3bfe3bdae89a91ce140e0ba2c8d835.jpg IP34.102.176.152:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash935353ca0d6a46ea8a60c2abd43e637d 2e16b685228f92820b74babf2ac6c86d84595cb1 c6e1b67779e5124d6e708f7d2b74a7a494d14b5f2188232e5e6fd926a6bf70f8
GET /media/2d0ccd_cc3bfe3bdae89a91ce140e0ba2c8d835.jpg/v1/fill/w_940,h_453,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/2d0ccd_cc3bfe3bdae89a91ce140e0ba2c8d835.jpg HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Fri, 18 Nov 2022 21:57:11 GMT
content-type: image/webp
content-length: 52364
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
vary: Accept
wix-tracer: 2Hjq2HJtTdkbu6Tw6PABmGUnlDP
x-seen-by: image-manipulator-77c4b7b444-9828x
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 471 B |
IP104.18.32.68:0
Hashc5a49de49b4ab9ad1c53bdfbecdcf86e 23b2692c7fe18e3f632b0bd6285cb8ea690f0528 f7704a5c2fb6ff8f4ff11b2bb42faea61f08deec5624c1d6e989da9815e1d102
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 21:57:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 15 Nov 2022 20:16:27 GMT
Expires: Tue, 22 Nov 2022 20:16:26 GMT
Etag: "23b2692c7fe18e3f632b0bd6285cb8ea690f0528"
Cache-Control: max-age=338954,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76c3f5dc2fcdb521-OSL
|
|
| frog.wix.com/site-members?_msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&_av=thunderbolt-1.11257.0&isb=false&_brandId=wix&_siteBranchId=undefined&_ms=1675&_lv=2.0.985%7CC&_mt_instance=BzUZ7pWyxniEH55TrGWEp-8pi_8ln3G-9VCBL0hgnhk.eyJpbnN0YW5jZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwic2lnbkRhdGUiOiIyMDIyLTExLTE4VDIxOjU3OjExLjQxN1oiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6IjdhYjhmZGY1LTc2ODYtNDJlNi1iNTg1LTRmNTc3YzdjNGU0NyIsInNpdGVPd25lcklkIjoiMmQwY2NkMTUtZWUxOC00Njg3LTg2ZmMtNGQyODc2ZjBjNjRlIn0&_visitorId=7ab8fdf5-7686-42e6-b585-4f577c7c4e47&_siteMemberId=undefined&bsi=3852d046-08d8-4c6e-a842-9b81e0f7f8bb%7C1&src=5&evid=698&biToken=13207794-e0c3-6600-14ef-b9ddcba3da5b&context=undefined&ts=625&viewmode=undefined&visitor_id=7ab8fdf5-7686-42e6-b585-4f577c7c4e47&site_member_id=undefined&site_settings_lng=en&browser_lng=en&lng_mismatch=false&layout=undefined&_isca=1&_iscf=1&_ispd=0&_ise=0&_=16688086299780 | 34.231.124.230 | 204 No Content | 0 B |
URL HTTP/2frog.wix.com/site-members?_msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&_av=thunderbolt-1.11257.0&isb=false&_brandId=wix&_siteBranchId=undefined&_ms=1675&_lv=2.0.985%7CC&_mt_instance=BzUZ7pWyxniEH55TrGWEp-8pi_8ln3G-9VCBL0hgnhk.eyJpbnN0YW5jZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwic2lnbkRhdGUiOiIyMDIyLTExLTE4VDIxOjU3OjExLjQxN1oiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6IjdhYjhmZGY1LTc2ODYtNDJlNi1iNTg1LTRmNTc3YzdjNGU0NyIsInNpdGVPd25lcklkIjoiMmQwY2NkMTUtZWUxOC00Njg3LTg2ZmMtNGQyODc2ZjBjNjRlIn0&_visitorId=7ab8fdf5-7686-42e6-b585-4f577c7c4e47&_siteMemberId=undefined&bsi=3852d046-08d8-4c6e-a842-9b81e0f7f8bb%7C1&src=5&evid=698&biToken=13207794-e0c3-6600-14ef-b9ddcba3da5b&context=undefined&ts=625&viewmode=undefined&visitor_id=7ab8fdf5-7686-42e6-b585-4f577c7c4e47&site_member_id=undefined&site_settings_lng=en&browser_lng=en&lng_mismatch=false&layout=undefined&_isca=1&_iscf=1&_ispd=0&_ise=0&_=16688086299780 IP34.231.124.230:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /site-members?_msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&_av=thunderbolt-1.11257.0&isb=false&_brandId=wix&_siteBranchId=undefined&_ms=1675&_lv=2.0.985%7CC&_mt_instance=BzUZ7pWyxniEH55TrGWEp-8pi_8ln3G-9VCBL0hgnhk.eyJpbnN0YW5jZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwic2lnbkRhdGUiOiIyMDIyLTExLTE4VDIxOjU3OjExLjQxN1oiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6IjdhYjhmZGY1LTc2ODYtNDJlNi1iNTg1LTRmNTc3YzdjNGU0NyIsInNpdGVPd25lcklkIjoiMmQwY2NkMTUtZWUxOC00Njg3LTg2ZmMtNGQyODc2ZjBjNjRlIn0&_visitorId=7ab8fdf5-7686-42e6-b585-4f577c7c4e47&_siteMemberId=undefined&bsi=3852d046-08d8-4c6e-a842-9b81e0f7f8bb%7C1&src=5&evid=698&biToken=13207794-e0c3-6600-14ef-b9ddcba3da5b&context=undefined&ts=625&viewmode=undefined&visitor_id=7ab8fdf5-7686-42e6-b585-4f577c7c4e47&site_member_id=undefined&site_settings_lng=en&browser_lng=en&lng_mismatch=false&layout=undefined&_isca=1&_iscf=1&_ispd=0&_ise=0&_=16688086299780 HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Fri, 18 Nov 2022 21:57:11 GMT
server: nginx
access-control-allow-origin: https://www.newquim.com.br
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
|
|
| frog.wix.com/bpm?_msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&_av=thunderbolt-1.11257.0&isb=false&_brandId=wix&_siteBranchId=undefined&_ms=1698&_lv=2.0.985%7CC&_mt_instance=BzUZ7pWyxniEH55TrGWEp-8pi_8ln3G-9VCBL0hgnhk.eyJpbnN0YW5jZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwic2lnbkRhdGUiOiIyMDIyLTExLTE4VDIxOjU3OjExLjQxN1oiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6IjdhYjhmZGY1LTc2ODYtNDJlNi1iNTg1LTRmNTc3YzdjNGU0NyIsInNpdGVPd25lcklkIjoiMmQwY2NkMTUtZWUxOC00Njg3LTg2ZmMtNGQyODc2ZjBjNjRlIn0&_visitorId=7ab8fdf5-7686-42e6-b585-4f577c7c4e47&_siteMemberId=undefined&bsi=3852d046-08d8-4c6e-a842-9b81e0f7f8bb%7C1&src=72&evid=520&widgetsList=%5B%5D&_isca=1&_iscf=1&_ispd=0&_ise=0&_=16688086299961 | 34.231.124.230 | 204 No Content | 0 B |
URL HTTP/2frog.wix.com/bpm?_msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&_av=thunderbolt-1.11257.0&isb=false&_brandId=wix&_siteBranchId=undefined&_ms=1698&_lv=2.0.985%7CC&_mt_instance=BzUZ7pWyxniEH55TrGWEp-8pi_8ln3G-9VCBL0hgnhk.eyJpbnN0YW5jZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwic2lnbkRhdGUiOiIyMDIyLTExLTE4VDIxOjU3OjExLjQxN1oiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6IjdhYjhmZGY1LTc2ODYtNDJlNi1iNTg1LTRmNTc3YzdjNGU0NyIsInNpdGVPd25lcklkIjoiMmQwY2NkMTUtZWUxOC00Njg3LTg2ZmMtNGQyODc2ZjBjNjRlIn0&_visitorId=7ab8fdf5-7686-42e6-b585-4f577c7c4e47&_siteMemberId=undefined&bsi=3852d046-08d8-4c6e-a842-9b81e0f7f8bb%7C1&src=72&evid=520&widgetsList=%5B%5D&_isca=1&_iscf=1&_ispd=0&_ise=0&_=16688086299961 IP34.231.124.230:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm?_msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&_av=thunderbolt-1.11257.0&isb=false&_brandId=wix&_siteBranchId=undefined&_ms=1698&_lv=2.0.985%7CC&_mt_instance=BzUZ7pWyxniEH55TrGWEp-8pi_8ln3G-9VCBL0hgnhk.eyJpbnN0YW5jZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwic2lnbkRhdGUiOiIyMDIyLTExLTE4VDIxOjU3OjExLjQxN1oiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6IjdhYjhmZGY1LTc2ODYtNDJlNi1iNTg1LTRmNTc3YzdjNGU0NyIsInNpdGVPd25lcklkIjoiMmQwY2NkMTUtZWUxOC00Njg3LTg2ZmMtNGQyODc2ZjBjNjRlIn0&_visitorId=7ab8fdf5-7686-42e6-b585-4f577c7c4e47&_siteMemberId=undefined&bsi=3852d046-08d8-4c6e-a842-9b81e0f7f8bb%7C1&src=72&evid=520&widgetsList=%5B%5D&_isca=1&_iscf=1&_ispd=0&_ise=0&_=16688086299961 HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Fri, 18 Nov 2022 21:57:11 GMT
server: nginx
access-control-allow-origin: https://www.newquim.com.br
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
|
|
| frog.wix.com/bpm | 34.231.124.230 | 204 No Content | 0 B |
IP34.231.124.230:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1778
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 18 Nov 2022 21:57:12 GMT
server: nginx
access-control-allow-origin: https://www.newquim.com.br
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
|
|
| frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=miss,miss&dc=84µPop=eun1_g&et=33&event_name=page%20interactive&is_cached=false&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&pid=mainPage&pn=1&sar=1280x1002&sessionId=03c84107-cd67-499a-950a-673d8dfec274&siterev=147-__siteCacheRevision__&sr=1280x1024&st=2&ts=829&tts=1879&url=https%3A%2F%2Fwww.newquim.com.br%2F&v=1.11257.0&vid=7ab8fdf5-7686-42e6-b585-4f577c7c4e47&bsi=3852d046-08d8-4c6e-a842-9b81e0f7f8bb|1&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&wor=1280x1024&wr=1280x939&_brandId=wix | 34.231.124.230 | 204 No Content | 0 B |
URL HTTP/2frog.wix.com/bt?src=29&evid=3&viewer_name=thunderbolt&caching=miss,miss&dc=84µPop=eun1_g&et=33&event_name=page%20interactive&is_cached=false&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&pid=mainPage&pn=1&sar=1280x1002&sessionId=03c84107-cd67-499a-950a-673d8dfec274&siterev=147-__siteCacheRevision__&sr=1280x1024&st=2&ts=829&tts=1879&url=https%3A%2F%2Fwww.newquim.com.br%2F&v=1.11257.0&vid=7ab8fdf5-7686-42e6-b585-4f577c7c4e47&bsi=3852d046-08d8-4c6e-a842-9b81e0f7f8bb|1&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&wor=1280x1024&wr=1280x939&_brandId=wix IP34.231.124.230:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bt?src=29&evid=3&viewer_name=thunderbolt&caching=miss,miss&dc=84µPop=eun1_g&et=33&event_name=page%20interactive&is_cached=false&is_platform_loaded=0&is_rollout=0&ism=1&isp=0&isjp=false&iss=1&ita=1&msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&pid=mainPage&pn=1&sar=1280x1002&sessionId=03c84107-cd67-499a-950a-673d8dfec274&siterev=147-__siteCacheRevision__&sr=1280x1024&st=2&ts=829&tts=1879&url=https%3A%2F%2Fwww.newquim.com.br%2F&v=1.11257.0&vid=7ab8fdf5-7686-42e6-b585-4f577c7c4e47&bsi=3852d046-08d8-4c6e-a842-9b81e0f7f8bb|1&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&wor=1280x1024&wr=1280x939&_brandId=wix HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Fri, 18 Nov 2022 21:57:12 GMT
server: nginx
access-control-allow-origin: https://www.newquim.com.br
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash16bbadb18616687351d4047aedc2ab45 979123c7ad6726befbbab2c07b50ecca31aa2d18 de8231c6ee426b7a76ebf574998dec11ce908efc0a745c2182fb7b61c5915e9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 21:57:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.newquim.com.br/_api/v2/dynamicmodel | 34.117.168.233 | 200 OK | 5.1 kB |
URL HTTP/2www.newquim.com.br/_api/v2/dynamicmodel IP34.117.168.233:0
File typeJSON data\012- , ASCII text, with very long lines (14749), with no line terminators Hashf305ea0f52fb801b81678d7acbbc1ad7 b49272d44a1ed73a46eaaaf5ebfb4976175e928c 41378f1a6ed7f856b85160889542dd3a737027ade605ebe7f47e0294caaa657d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /_api/v2/dynamicmodel HTTP/1.1
Host: www.newquim.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.newquim.com.br/
Connection: keep-alive
Cookie: ssr-caching=cache#desc=miss#varnish=miss#dc#desc=eun1_g; XSRF-TOKEN=1668808631|vZk4NrUcEqJ0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 18 Nov 2022 21:57:11 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
strict-transport-security: max-age=3600
x-wix-request-id: 1668808631.31229383913230622
age: 0
x-seen-by: GXNXSWFXisshliUcwO20NXdyD4zpCpFzpCPkLds0yMejPecOHBjLP6QyYuR2WEJE,qquldgcFrj2n046g4RNSVBKUaXHrucSLmP/C0nqrtU9YgeUJqUXtid+86vZww+nL,2d58ifebGbosy5xc+FRalp2sQVkjo1nPzTX3nl3mTeUliT28jlJnjQ/WGZNY0cZ/XjasSmn6KEfJMcGqErZkCOnKq/yY8cuH4VKB/CjxCO0=,2UNV7KOq4oGjA5+PKsX47PeE4JkJeK48Oko5cEfOjJRYgeUJqUXtid+86vZww+nL,7npGRUZHWOtWoP0Si3wDp+hfs1rivG7/v7T+EhRgHXY=,xTu8fpDe3EKPsMR1jrheEB+rUJIcPgOqOkYGEfTXAcU=,UOYNUEAXqn/WZl+iQhS1dqtGmadh0ZgdP5or9zcI8VNYn5aDyrL5Idm7bLJw5Y2yCONUzZLbexpS3PEZaUF96g==
cache-control: no-cache, no-store
vary: Accept-Encoding
server-timing: cache;desc=miss, varnish;desc=miss, dc;desc=eun1_g
set-cookie: hs=-1202805641; Path=/; Domain=www.newquim.com.br; HTTPOnly
svSession=8a506ac8c5c8d7b7e6ca3c14c04c9f584a042a1f25353cd38b273eba323254fb7d43c6b7b6f7b95998bdc3c5f76e9d751e60994d53964e647acf431e4f798bcd67417d5f4811f052223c615fe15898735c843e9dd58dbb6d9a8c22b91201f514bd01ca790c9bd595d67a2b565f6285fbb6d002e266d55d838edd0061e225862fd8ec4d1cd475e7e63f41328da54c09ad; Max-Age=63158400; Expires=Mon, 18 Nov 2024 21:57:11 GMT; Path=/; Domain=www.newquim.com.br; Secure; HTTPOnly; SameSite=None
x-content-type-options: nosniff
content-encoding: br
server: Pepyaka/1.19.10
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-45103921-1 | 142.250.74.168 | 200 OK | 44 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-45103921-1 IP142.250.74.168:0
Hash8a385524cbe094529c3b18d71af121ca 4e59809aef9693e34d887febebb6573457d731ed 261de48162c5cf302bbcfae5337495911bc02ce26798294ee6cd7c5016158022
GET /gtag/js?id=UA-45103921-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 18 Nov 2022 21:57:12 GMT
expires: Fri, 18 Nov 2022 21:57:12 GMT
cache-control: private, max-age=900
last-modified: Fri, 18 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43617
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash17af07b019100dc8adb529ce85f827bd 602adaa722e9a3ee89600ebe40cea7033c435483 aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14988
Expires: Sat, 19 Nov 2022 02:07:00 GMT
Date: Fri, 18 Nov 2022 21:57:12 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash35da1192dcadc6e329a9e60c16904301 90a146aef85765630a5e09e46a0a8682e204bec1 816d1387a3a91a82f0bdaa2b703b45aa30be206d30d4dd1e8ac5deca13de57ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10281
x-amzn-requestid: 11dffc4e-71d7-4195-8890-62c8a2092728
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-77EWaIAMF3WA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab7f-3c0dc7e43023af827ac26958;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:45:35 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Xbau-BXu_W5Hu8QaCg3tvwfYMb_8L8F_muNp4gVukeNTmiDW4BAXhA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:24:03 GMT
age: 84789
etag: "90a146aef85765630a5e09e46a0a8682e204bec1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash032386e5c9dffff1ba1ee5e8a322d438 dd4fd6c803a9b333bace9a541c6bd183d0c56bb9 0e9f559a0aa7e114c5810a27ba243c0da7b44dc0bf7aec2b7ab32b8f0e2b536c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: 4778d1bd-28c3-4665-89da-046e356087f0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyD1HE-oAMF0QQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-53c7330c5fd36d3c4d9e6aed;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CHi9V7-WaWmG6Y0249CZJnhe_RjvleaGFVXoOnJ62cjrcXoLLKwzgw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 07:20:30 GMT
age: 52602
etag: "dd4fd6c803a9b333bace9a541c6bd183d0c56bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg | 34.120.237.76 | 200 OK | 7.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb2b393e36ee2c9649d90db136aa49542 e88c5832ff0c49bab181d948c3a510d88343bb6f 8b524701df43bff56ac52a021ff0fbd964e06f00e84b4861aa557ec6ae6b4ffd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7631
x-amzn-requestid: b47e545d-1fb6-4a62-ab45-28cdb9d3f0b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-vQE0XoAMFS3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab2e-56365eed3d4c082c53b172b3;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:44:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qpoQa1Lhe-h27dGooXDCtujesSTg7Tb0Ov-PNLnUP0288ZofwHxkhQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:24:12 GMT
age: 84780
etag: "e88c5832ff0c49bab181d948c3a510d88343bb6f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dd26f9e-1666-47e7-91b0-4b371ede5e61.jpeg | 34.120.237.76 | 200 OK | 6.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dd26f9e-1666-47e7-91b0-4b371ede5e61.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash30ad43f65949e7e22e73292e3d684f3d 9404b0071027ac7ec0055a9edfbd607e3a8ae501 b97961cbd2245f9927c1c0406451449d28cca24c98c534cace78321ac62eeeb2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dd26f9e-1666-47e7-91b0-4b371ede5e61.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5955
x-amzn-requestid: fe915fbe-b1dc-4fbd-8a10-1cb46e08f56c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btqPjHloIAMFidw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63755730-16deb73f48305b0139b1d9bd;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 21:33:36 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: w5oaYWJSVOeVrPbXHuSb8rPM2oERM4FwKdVBcdRazSjV28c6quIeYw==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:39:45 GMT
age: 1047
etag: "9404b0071027ac7ec0055a9edfbd607e3a8ae501"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg | 34.120.237.76 | 200 OK | 6.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha9d32fa3866dd741de610a61a93ad893 4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e 4492338de536cfae6fb42fd37170c60f4fbc281a2a924efe6d2b5af352cd102c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6344
x-amzn-requestid: cac35b04-be3b-4ae1-bb5e-8cedcd7a7db4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btqOVFCXIAMFcOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63755728-45c28fa333b748520be29b57;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 21:33:28 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: mhgNSp1_LsVmn00ULm116flMHpnfE6G6JABrJwXH5i4q-isv_W1-Ig==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 f313d3df80c4dab8f5399614116801cc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:34:05 GMT
age: 1387
etag: "4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg | 34.120.237.76 | 200 OK | 3.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5d0b6106f00f9fd8b89c2d484a559a1a 399ac393209dcdac7d2188d7aa8d95f04570ef7c 5d8151c9eb558f4a2b8bd2952c6845606ddb0c27e36f6e49aca7e60908cd9fe4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3759
x-amzn-requestid: 8c91ac59-89dc-4218-b69f-0cebb29f301b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-wJHgxoAMF-hQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab33-4dac305614a92bc52c038222;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:44:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Mb2-PTjNmt06Wd5jOjQ5WoLY-0NgI80CKPXtwgzBt4n5km8Pu_WN0Q==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:08:54 GMT
age: 85698
etag: "399ac393209dcdac7d2188d7aa8d95f04570ef7c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash16bbadb18616687351d4047aedc2ab45 979123c7ad6726befbbab2c07b50ecca31aa2d18 de8231c6ee426b7a76ebf574998dec11ce908efc0a745c2182fb7b61c5915e9a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 21:57:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 18 Nov 2022 20:41:09 GMT
expires: Fri, 18 Nov 2022 22:41:09 GMT
cache-control: public, max-age=7200
age: 4563
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/plugins/ua/ec.js | 142.250.74.174 | 200 OK | 1.1 kB |
URL HTTP/2www.google-analytics.com/plugins/ua/ec.js IP142.250.74.174:0
File typeASCII text, with very long lines (523) Hash17427cd827c6f9e01d5ee868be659be5 6ff2e43c1a10e3c924870b48ae3cc36280b97f53 59157001be3cd5b0e3eae8afa425d1c694591c403fb9692bc3ad6d3235b423e7
GET /plugins/ua/ec.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1129
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 18 Nov 2022 21:11:41 GMT
expires: Fri, 18 Nov 2022 22:11:41 GMT
cache-control: public, max-age=3600
age: 2731
last-modified: Thu, 30 Dec 2021 12:48:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| frog.wix.com/bpm | 34.231.124.230 | 204 No Content | 0 B |
IP34.231.124.230:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2597
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 18 Nov 2022 21:57:12 GMT
server: nginx
access-control-allow-origin: https://www.newquim.com.br
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
|
|
| frog.wix.com/bpm | 34.231.124.230 | 204 No Content | 0 B |
IP34.231.124.230:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1814
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 18 Nov 2022 21:57:13 GMT
server: nginx
access-control-allow-origin: https://www.newquim.com.br
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
|
|
| frog.wix.com/bpm?_msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&_av=thunderbolt-1.11257.0&isb=false&ts=3030&tsn=4079&dc=84µPop=eun1_g&caching=miss%2Cmiss&session_id=03c84107-cd67-499a-950a-673d8dfec274&st=2&url=https%3A%2F%2Fwww.newquim.com.br%2F&ish=false&pn=1&isFirstNavigation=true&pv=true&pageId=mainPage&isServerSide=false&is_lightbox=false&is_cached=false&is_sav_rollout=0&is_dac_rollout=0&v=1.11257.0&_brandId=wix&_siteBranchId=undefined&_ms=4079&_lv=2.0.985%7CC&_mt_instance=BzUZ7pWyxniEH55TrGWEp-8pi_8ln3G-9VCBL0hgnhk.eyJpbnN0YW5jZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwic2lnbkRhdGUiOiIyMDIyLTExLTE4VDIxOjU3OjExLjQxN1oiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6IjdhYjhmZGY1LTc2ODYtNDJlNi1iNTg1LTRmNTc3YzdjNGU0NyIsInNpdGVPd25lcklkIjoiMmQwY2NkMTUtZWUxOC00Njg3LTg2ZmMtNGQyODc2ZjBjNjRlIn0&_visitorId=undefined&_siteMemberId=undefined&src=72&evid=502&_=16688086323783&tti=1870&tbt=104&iframes=0&screens=2&countScripts=33&startTimeScripts=1189&durationScripts=884&mttfbScripts=18&attfbScripts=21&tbdScripts=352175&countImages=6&startTimeImages=1500&durationImages=110&mttfbImages=273&attfbImages=271&tbdImages=142819&countFonts=1&startTimeFonts=1227&durationFonts=29&mttfbFonts=20&attfbFonts=20&tbdFonts=86007&entryType=loaded&duration=1633&ttlb=1146&dcl=1356&transferSize=77975&decodedBodySize=345892&pageCaching=maybe%20CDN&isSsr=true&isWelcome=false&bsi=3852d046-08d8-4c6e-a842-9b81e0f7f8bb%7C1&ssrDuration=139&ssrTimestamp=1668808631265&isRollout=false&isPlatformLoaded=false&maybeBot=false&clientType=ugc&analytics=true&_isca=1&_iscf=1&_ispd=0&_ise=1 | 34.231.124.230 | 204 No Content | 0 B |
URL HTTP/2frog.wix.com/bpm?_msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&_av=thunderbolt-1.11257.0&isb=false&ts=3030&tsn=4079&dc=84µPop=eun1_g&caching=miss%2Cmiss&session_id=03c84107-cd67-499a-950a-673d8dfec274&st=2&url=https%3A%2F%2Fwww.newquim.com.br%2F&ish=false&pn=1&isFirstNavigation=true&pv=true&pageId=mainPage&isServerSide=false&is_lightbox=false&is_cached=false&is_sav_rollout=0&is_dac_rollout=0&v=1.11257.0&_brandId=wix&_siteBranchId=undefined&_ms=4079&_lv=2.0.985%7CC&_mt_instance=BzUZ7pWyxniEH55TrGWEp-8pi_8ln3G-9VCBL0hgnhk.eyJpbnN0YW5jZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwic2lnbkRhdGUiOiIyMDIyLTExLTE4VDIxOjU3OjExLjQxN1oiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6IjdhYjhmZGY1LTc2ODYtNDJlNi1iNTg1LTRmNTc3YzdjNGU0NyIsInNpdGVPd25lcklkIjoiMmQwY2NkMTUtZWUxOC00Njg3LTg2ZmMtNGQyODc2ZjBjNjRlIn0&_visitorId=undefined&_siteMemberId=undefined&src=72&evid=502&_=16688086323783&tti=1870&tbt=104&iframes=0&screens=2&countScripts=33&startTimeScripts=1189&durationScripts=884&mttfbScripts=18&attfbScripts=21&tbdScripts=352175&countImages=6&startTimeImages=1500&durationImages=110&mttfbImages=273&attfbImages=271&tbdImages=142819&countFonts=1&startTimeFonts=1227&durationFonts=29&mttfbFonts=20&attfbFonts=20&tbdFonts=86007&entryType=loaded&duration=1633&ttlb=1146&dcl=1356&transferSize=77975&decodedBodySize=345892&pageCaching=maybe%20CDN&isSsr=true&isWelcome=false&bsi=3852d046-08d8-4c6e-a842-9b81e0f7f8bb%7C1&ssrDuration=139&ssrTimestamp=1668808631265&isRollout=false&isPlatformLoaded=false&maybeBot=false&clientType=ugc&analytics=true&_isca=1&_iscf=1&_ispd=0&_ise=1 IP34.231.124.230:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm?_msid=13207794-e0c3-6600-14ef-b9ddcba3da5b&vsi=48828b03-d7a6-4fe3-b865-41b4eb907247&_av=thunderbolt-1.11257.0&isb=false&ts=3030&tsn=4079&dc=84µPop=eun1_g&caching=miss%2Cmiss&session_id=03c84107-cd67-499a-950a-673d8dfec274&st=2&url=https%3A%2F%2Fwww.newquim.com.br%2F&ish=false&pn=1&isFirstNavigation=true&pv=true&pageId=mainPage&isServerSide=false&is_lightbox=false&is_cached=false&is_sav_rollout=0&is_dac_rollout=0&v=1.11257.0&_brandId=wix&_siteBranchId=undefined&_ms=4079&_lv=2.0.985%7CC&_mt_instance=BzUZ7pWyxniEH55TrGWEp-8pi_8ln3G-9VCBL0hgnhk.eyJpbnN0YW5jZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwiYXBwRGVmSWQiOiIyMmJlZjM0NS0zYzViLTRjMTgtYjc4Mi03NGQ0MDg1MTEyZmYiLCJtZXRhU2l0ZUlkIjoiMTMyMDc3OTQtZTBjMy02NjAwLTE0ZWYtYjlkZGNiYTNkYTViIiwic2lnbkRhdGUiOiIyMDIyLTExLTE4VDIxOjU3OjExLjQxN1oiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6IjdhYjhmZGY1LTc2ODYtNDJlNi1iNTg1LTRmNTc3YzdjNGU0NyIsInNpdGVPd25lcklkIjoiMmQwY2NkMTUtZWUxOC00Njg3LTg2ZmMtNGQyODc2ZjBjNjRlIn0&_visitorId=undefined&_siteMemberId=undefined&src=72&evid=502&_=16688086323783&tti=1870&tbt=104&iframes=0&screens=2&countScripts=33&startTimeScripts=1189&durationScripts=884&mttfbScripts=18&attfbScripts=21&tbdScripts=352175&countImages=6&startTimeImages=1500&durationImages=110&mttfbImages=273&attfbImages=271&tbdImages=142819&countFonts=1&startTimeFonts=1227&durationFonts=29&mttfbFonts=20&attfbFonts=20&tbdFonts=86007&entryType=loaded&duration=1633&ttlb=1146&dcl=1356&transferSize=77975&decodedBodySize=345892&pageCaching=maybe%20CDN&isSsr=true&isWelcome=false&bsi=3852d046-08d8-4c6e-a842-9b81e0f7f8bb%7C1&ssrDuration=139&ssrTimestamp=1668808631265&isRollout=false&isPlatformLoaded=false&maybeBot=false&clientType=ugc&analytics=true&_isca=1&_iscf=1&_ispd=0&_ise=1 HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Fri, 18 Nov 2022 21:57:14 GMT
server: nginx
access-control-allow-origin: https://www.newquim.com.br
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
|
|
| frog.wix.com/bpm | 34.231.124.230 | 204 No Content | 0 B |
IP34.231.124.230:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bpm HTTP/1.1
Host: frog.wix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1296
Origin: https://www.newquim.com.br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 18 Nov 2022 21:57:14 GMT
server: nginx
access-control-allow-origin: https://www.newquim.com.br
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash05289172c1455c4134e496c6f4606efd ce1bb33256b0754f9acc01e7e9f3e5dc85f89244 a8b4411a0310cc376efe2aec7c0830b8d3b63b8827631b0ff43ec092f1f80f82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 12065
x-amzn-requestid: 45c97153-71c7-4985-a1ad-fc21a509d153
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-K5FyVIAMFtDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa45-0f9d22dd544a4580570f3089;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dxT2WJB7m5tUhgBn2PwTIN4Zskzm3X7CW-29hl1nCyNPbKt5j6q5iA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:02:57 GMT
age: 86062
etag: "ce1bb33256b0754f9acc01e7e9f3e5dc85f89244"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.newquim.com.br/ | 34.117.168.233 | 200 OK | 0 B |
IP34.117.168.233:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: www.newquim.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 18 Nov 2022 21:57:11 GMT
content-type: text/html; charset=UTF-8
link: <https://static.parastorage.com/>; rel=preconnect; crossorigin;,<https://static.parastorage.com/>; rel=preconnect;,<https://static.wixstatic.com/>; rel=preconnect; crossorigin;,<https://static.wixstatic.com/>; rel=preconnect;,<https://siteassets.parastorage.com>; rel=preconnect; crossorigin;,
x-wix-request-id: 1668808630.8496564265149315
content-language: en-US
strict-transport-security: max-age=3600
age: 0
x-seen-by: GXNXSWFXisshliUcwO20NXdyD4zpCpFzpCPkLds0yMcidKlNmJkIKnGXg121Y2H5,qquldgcFrj2n046g4RNSVKgcQ1THjb6B0pY8+X3A5SZYgeUJqUXtid+86vZww+nL,2d58ifebGbosy5xc+FRalssI/3a9eyTjIO1bv88EZg751HkmCfbmKJRkJQjlscDAXjasSmn6KEfJMcGqErZkCMkoaLuM1mBiMjNljv9LOkI=,2UNV7KOq4oGjA5+PKsX47PeE4JkJeK48Oko5cEfOjJRYgeUJqUXtid+86vZww+nL,7npGRUZHWOtWoP0Si3wDp4XIJAvS2f9V1Q6nZ4+/NvQ=,UOYNUEAXqn/WZl+iQhS1dq1jpc9qBSVoKzWrv4JjfBhsyoqL8TB410/n4U8r+mnyKjCWKapddFlOEEDxcGowaw==,xTu8fpDe3EKPsMR1jrheEJoqhF0nJ9Ys4rNq4vC1WKk=,LoUK8/saGAmOxZWtpubo2kVgZ58zNgiBPPZt1t3FPIJl4n5uCyfIdV/uSmH+FhnEte8iAxtONJ7SUu2GJppj9A==,xTu8fpDe3EKPsMR1jrheECmvUmy7CXxAfEJthGLby1U=,xTu8fpDe3EKPsMR1jrheEAB2XisQhuFl8FPN27Lz2tE=,/a5ccLSK1HEmwPNg/x6Ourz4UG529+Hg1SLlFTmtVWUnq1kmFtfecxazv1ghuZ9mc7u4t0vYPOu7WxAIkhvG5Q==
vary: Accept-Encoding
set-cookie: ssr-caching=cache#desc=miss#varnish=miss#dc#desc=eun1_g; Max-Age=20; Expires=Fri, 18 Nov 2022 21:57:31 GMT
XSRF-TOKEN=1668808631|vZk4NrUcEqJ0; Path=/; Domain=www.newquim.com.br; Secure; SameSite=None
server-timing: cache;desc=miss, varnish;desc=miss, dc;desc=eun1_g
cache-control: private,max-age=0,must-revalidate
x-content-type-options: nosniff
content-encoding: br
server: Pepyaka/1.19.10
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| static.parastorage.com/services/wix-thunderbolt/dist/main.a663c0af.bundle.min.js | 151.101.85.91 | 200 OK | 0 B |
URL HTTP/2static.parastorage.com/services/wix-thunderbolt/dist/main.a663c0af.bundle.min.js IP151.101.85.91:0
GET /services/wix-thunderbolt/dist/main.a663c0af.bundle.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.newquim.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Thu, 17 Nov 2022 03:07:07 GMT
etag: W/"a216a490fa4bb397b5dafd6dccba9359"
x-amz-version-id: EFbgsAfBUnFWlE0JUH8HMWt2M6P0Lful
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjBLy8P45DoDO4LnRm+zqsP,aVxMblM8KFG3we5NLvyVcyzve4L4qo9dv8TvlcgmZhMQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1668675492.795689746613631921
accept-ranges: bytes
date: Fri, 18 Nov 2022 21:57:11 GMT
age: 133144
x-served-by: cache-bma1647-BMA
x-cache: HIT
x-cache-hits: 3092
x-timer: S1668808631.363000,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 42349
X-Firefox-Spdy: h2
|
|